Installing and Configuring an Endpoint Policy Server

We recommend that you use a distributed deployment that contains external Endpoint Policy Servers on dedicated computers.

• Install at least one Endpoint Policy Server for each remote site.

• For larger sites, install many Endpoint Policy Servers to improve performance.

An Endpoint Policy Server is a Log Server that you configure as an Endpoint Policy Server.

Installing an Endpoint Policy Server

To install Endpoint Policy Server, install a Log Server and configure it as Endpoint Policy Server. Use the instructions in the R81.20 Installation and Upgrade Guide.

Configuring an Endpoint Policy Server

To define an Endpoint Policy Server:

1. In SmartEndpoint, go to Manage > Endpoint Servers.

   The Endpoint Servers window opens.

2. Click New.

   To edit an existing server, select it from the list and click Edit.

   The Endpoint Server Wizard opens.

3. In the Name field, enter the Fully Qualified Domain Name (FQDN) of the Endpoint Policy Server. For example, somehost.example.com.

   Note - We recommend that you enter the FQDN so that if the IP address of the server changes, the client uses the FQDN to communicate with the server. It also allows you to use an internal non-routable, private IP address for the server (for example 10.1.2.3).

4. In the IP Address field, enter the IP address of the Endpoint Policy Server.

   Note - The Harmony Endpoint Security Client uses either FQDN or IP address, whichever is quicker to communicate with the server and displays it in the Endpoint Security Client Home screen.

5. Select Endpoint Policy Server

6. Click Next.

7. Select an option to initiate secure trusted communication now or later:

   • Initiate trusted communication (If the servers are up and able to communicate)

     • Enter and confirm an Activation Key. You will enter this same key on the other servers.

     • Click Initialize.

   • Skip and initiate trusted communication later (If the servers are not ready to communicate)

8. Click Next.

   A warning pop-up window shows.

9. Click OK.

10. Click Finish.

    The Install Database window opens.

11. Wait for the database installation to finish.

    The Close button becomes available.

12. To verify if your server in an Endpoint Policy Server or an Endpoint Management Server:

    1. Connect to the server using SSH.

    2. Run :

       cpprod_util UepmIsPolicyServer

    The output 1 indicates that your server is an Endpoint Policy Server and the output 0 indicates that your server is an Endpoint Management Server