---
title: "McAfee ePO SOAR Integration"
canonical: "https://docs.devo.com/space/latest/992156970/McAfee%20ePO%20SOAR%20Integration"
format: markdown
---
> Macro (toc)

McAfee ePolicy Orchestrator provides a web application programming interface (API) that allows you to script and automate common management activities.

# Connect McAfee ePO with Devo SOAR

1. Navigate to **Automations** > **Integrations**.
2. Search for **McAfee ePO**.
3. Click **Details**, then the **+** icon. Enter the required information in the following fields.
4. **Label**: Enter a connection name.
5. **Reference Values**: Define variables here to templatize integration connections and actions. For example, you can use [https://www.{{hostname}}.com](https://www.{{hostname}}.com) where, hostname is a variable defined in this input. For more information on how to add data, see ['Add Data' Input Type for Integrations](add-an-integration-connection#add-data-input-type-for-integrations).
6. **Verify SSL**: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).
7. **Remote Agent**: Run this integration using the Devo SOAR Remote Agent.
8. **Server IP or Hostname**: McAfee ePO Server IP address or Hostname.
9. **Port Number**: McAfee ePO server Port Number.
10. **Username**: To access McAfee ePO REST API, provide a valid username.
11. **Password**: To access McAfee ePO REST API, provide a valid password.
12. After you've entered all the details, click **Connect**.

# Actions for McAfee ePO

## Query Events

Triggers an action for McAfee ePO API.

### Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

| Input Name | Description | Required |
| --- | --- | --- |
| Query Events | Fetch all queries from McAfee ePO server and then fetch results for each one by ID. | Required |

# Release Notes

- `v2.0.0` - Updated architecture to support IO via filesystem
- `v1.0.8` - Added documentation link in the automation library.

> Macro (rw-ui-children)