Cyware Orchestrate

McAfee ePolicy Orchestrator (ePO) is a security management software that centralizes and streamlines the management of endpoint, network, data security, and compliance solutions. The McAfee ePolicy Orchestrator (ePO) app enables security teams to integrate with the McAfee ePolicy Orchestrator (ePO) enterprise application to manage endpoint, network, data security, and compliance solutions.

The McAfee ePolicy Orchestrator (ePO) app is configured with the Orchestrate application to perform the following actions:

The following configuration parameters are required for the McAfee ePolicy Orchestrator (ePO) app to communicate with the McAfee ePolicy Orchestrator (ePO) enterprise application. The parameters can be configured by creating instances in the app.

This action retrieves the list of all the available endpoints.

Action Input Parameters

This action does not require any input parameter.

This action applies tags to a system.

Action Input Parameters

Example Request

[
    {
        "names": "Sample System",
        "tagname": "Sample Tag"
    }
]

This action clears tags from systems.

Action Input Parameters

Example Request

[
    {
        "names": "Sample System",
        "tagname": "Sample Tag"
    }
]

This action retrieves system information such as name, IP address, OS, and so on.

Action Input Parameters

Example Request

[
    {
        "groupid": "34"
    }
]

This action retrieves the list of all the tables.

Action Input Parameters

This action does not require any input parameter.

This action retrieves the list of all the group IDs of all sub-trees in an organization.

Action Input Parameters

This action does not require any input parameter.

This action moves systems in the organization sub-tree. This action is also used to quarantine a system.

Action Input Parameters

Example Request

[
    {
        "names": "26A-DESKTOP",
        "parentgroupid": "54"
    }
]

This action queries tables.

Action Input Parameters

Example Request

[
    {
        "query_id": "23"
    }
]

This action wakes up systems on which the client is installed.

Action Input Parameters

Example Request

[
    {
        "names": "Sample System Name"
    }
]

This action retrieves the list of all available databases.

Action Input Parameters

This action does not require any input parameter

This action retrieves the list of all the queries which the user has permission to view.

Action Input Parameters

This action does not require any input parameter.

This action searches policies with the given query.

Action Input Parameters

Example Request

[
    {
        "query": "quarantine"
    }
]

This action searches repositories with the given query.

Action Input Parameters

Example Request

[
    {
        "query": "quarantine"
    }
]

This action searches systems in a system tree.

Action Input Parameters

Example Request

[
    {
        "query": "Sample System"
    }
]

This action exports all permission sets.

Action Input Parameters

This action does not require any input parameter.

This action adds a permission set to a user.

Action Input Parameters

Example Request

[
   {
      "user_name":"Sample Username",
      "permission_set_name":[
         "Global Reviewer",
         "Analyst"
      ]
   }
]

This action deploys agents to a list of systems.

Action Input Parameters

Example Request

[
    {
        "name": "Sample Name",
        "user_name": "SampleUsername",
        "password": "SamplePassword"
    }
]

This action ends a running task.

Action Input Parameters

Example Request

[
    {
        "task_log_id": "46"
    }
]

This action runs a server task.

Action Input Parameters

Example Request

[
    {
        "task_name": "New Server Task"
    }
]