McAfee ePolicy Orchestrator provides a web application programming interface (API) that allows you to script and automate common management activities.

Connect McAfee ePO with Devo SOAR

1. Navigate to Automations > Integrations.

2. Search for McAfee ePO.

3. Click Details, then the + icon. Enter the required information in the following fields.

4. Label: Enter a connection name.

5. Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.

6. Verify SSL: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).

7. Remote Agent: Run this integration using the Devo SOAR Remote Agent.

8. Server IP or Hostname: McAfee ePO Server IP address or Hostname.

9. Port Number: McAfee ePO server Port Number.

10. Username: To access McAfee ePO REST API, provide a valid username.

11. Password: To access McAfee ePO REST API, provide a valid password.

12. After you've entered all the details, click Connect.

Actions for McAfee ePO

Query Events

Triggers an action for McAfee ePO API.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Release Notes

• v2.0.0 - Updated architecture to support IO via filesystem

• v1.0.8 - Added documentation link in the automation library.