topic Re: Replacing McAfee endpoint with Harmony endpoint in Endpoint

Replacing McAfee endpoint with Harmony endpoint

AdaCoul — Wed, 09 Mar 2022 19:32:54 GMT

Hello everyone,

I have to install Harmony Endpoint on over 1000 Computers on with McAfee endpoint is already installed.

As I can see in this video : https://www.youtube.com/watch?v=70QwDcPfYEI when Harmony endpoint is installed, McAfee is automatically goes uninstall.

I want to know if this process is autocally done or if there any thing else to do.

Regards,

Re: Replacing McAfee endpoint with Harmony endpoint

Swiftyyyy — Wed, 09 Mar 2022 20:33:09 GMT

Consult https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_EndpointWebManagement_AdminGuide/Topics-Common-for-HEP/Uninstalling-Third-Party-Antivirus-Software-Products.htm for more details.

Removing other products is not the default action, it does require a non-standard install line.

I'd suggest you pilot this on a few devices first.
Otherwise, would it be too much trouble to just use your ePO to uninstall the Endpoints cleanly?
While the Check Point agent probably does a decent enough job at it, I'd generally prefer a 1st party solution.

Re: Replacing McAfee endpoint with Harmony endpoint

AdaCoul — Wed, 09 Mar 2022 21:15:01 GMT

Hi @Swiftyyyy

Thanks for this reponse. I would just like how it works, I will do some tests in lab invronment.

Othervise, Is it possible to configure a package with this option with automatically uninstall McAfee through the cloud console and then install it on the clients or this is just possible in command line interface as I can see in Web Admin guide ?

Thanks.

Re: Replacing McAfee endpoint with Harmony endpoint

Pawel_eM — Fri, 11 Mar 2022 09:16:25 GMT

Hello,

I went through this a few months ago (but on ~15k endpoints)

You could try this method (first of all You must change mcafee policy, disable password protection and self protect)

But in my case on some endpoints only mcafee agent was uninstalled, and in more then 50% cases mcafee dxl wosnt uninstalled at all and could not uninstall it manualy also)

Running mcafee endpoint product removal tool after harmony was installed fully also isnt a good idea bocouse it could coroupt some blades (antimalware goes to unknown to not running state) got info from support that it is z known issue and they will send You an patch for fixing this issue)

Re: Replacing McAfee endpoint with Harmony endpoint

Michi — Wed, 23 Mar 2022 14:55:52 GMT

We're having the same situation.

I can suggest you the "Compliance Blade" -> we've created a Rule which checks if both AV's are running, if so we let the McAfee Endpoint Removal Tool handle the uninstallation.

Group Check: (CPHE Anti-Malware or McAfee VSE running exclusively) -> [Require at least one check to succeed]

None of CPHE Anti-Malware or McAfee VSE running
McAfee but no CPHE Anti-Malware running
CPHE Anti-Malware but no McAfee running

Works like a charm.

Best regards,

Michele

Re: Replacing McAfee endpoint with Harmony endpoint

the_rock — Wed, 23 Mar 2022 16:45:06 GMT

If I were you, I would get an official answer from TAC. You definitely dont want to come into a situation where you are confident install will work, but then it complains about McAfee portions still being present.

Re: Replacing McAfee endpoint with Harmony endpoint

Michi — Thu, 31 Mar 2022 12:19:08 GMT

We've already used it with around 100 Clients and Servers.

It is the default behavior to get rid of McAfee and it is recommended by McAfee to use the McAfee Endpoint Removal Tool.

I'm not sure if TAC could provide me an sufficient solution since their ability to do something are very limited in the case of "McAfee Replacement"

Best regards