9.Install anti virus - Mcafee

####1.set hosts file
#check 
salt -N 'OS-Windows' cmd.run 'pushd C:\Windows\System32\drivers\etc && find "xx.xx.10.134" hosts'
#find out all server which hosts not set this, add them the hosts of EPO
salt -N 'OS-Windows' cmd.run 'pushd C:\Windows\System32\drivers\etc && echo xx.xx.10.134 WIN-MLTCMPIK6J9 >> hosts'
#check again
salt -N 'OS-Windows' cmd.run 'pushd C:\Windows\System32\drivers\etc && find "xx.xx.10.134" hosts'

####2.install Agent&AntiVirus
salt -N 'OS-Windows' cmd.run 'D:\software\McAfeeSmartInstall.exe -s -f -i "D:\software\McAfee\Common Framework"'
#check in EPO,and apply antivirus
#1.select "system name"
#2."Action"->"Run Client"->"Install AV"
#reboot Agent server to apply policy
#INSTALLDIR="D:\software\McAfee\VirusScan Enterprise"

####3.Antivirus Windows firewall rule
#Default will create "private,publidc,domain" three types for one rule, delete them and just make them one.
#xx.xx.10.134 epo
#delete current
salt '*' cmd.run 'netsh advfirewall firewall delete rule name="McAfee Framework Service"' 
salt '*' cmd.run 'netsh advfirewall firewall delete rule name="McAfee Service Manager"'
#apply new
salt '*' cmd.run 'netsh advfirewall firewall add rule name="McAfee Framework Service" dir=in action=allow program="D:\software\McAfee\Common Framework\FrameworkService.exe" enable=yes protocol=UDP remoteip=xx.xx.10.134'
salt '*' cmd.run 'netsh advfirewall firewall add rule name="McAfee Framework Service" dir=in action=allow program="D:\software\McAfee\Common Framework\FrameworkService.exe" enable=yes protocol=TCP remoteip=xx.xx.10.134'
salt '*' cmd.run 'netsh advfirewall firewall add rule name="McAfee Service Manager" dir=in action=allow program="D:\software\McAfee\Common Framework\MfeServiceMgr.exe" enable=yes protocol=UDP remoteip=xx.xx.10.134'
salt '*' cmd.run 'netsh advfirewall firewall add rule name="McAfee Service Manager" dir=in action=allow program="D:\software\McAfee\Common Framework\MfeServiceMgr.exe" enable=yes protocol=TCP remoteip=xx.xx.10.134'