---
sourceDocument: Brazil Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/security-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Edit security tags

# Edit security tags in the ServiceNow AI Platform for the McAfee ePO
integration {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
As part of the setup for the integration, edit the security tag names that you
created in your McAfee ePO console in your ServiceNow AI Platform instance.
Edit the tag names in your ServiceNow AI Platform instance so that they match the names of
the tags in your McAfee ePO console.

## Before you begin

Role required: ServiceNow AI Platform security incident administrator
(sn_si.admin)

## About this task

The security tag names in your McAfee ePO console for the initiate malware scan and isolate host actions must match the
security tag names in the records for these capabilities of your ServiceNow AI Platform instance.
Before you create a capability profile to run your capabilities, view the list of available McAfee ePO capabilities and edit the security tags in your ServiceNow AI Platform instance so that they match the security tag names in your McAfee ePO console.

For more information
about creating the security tag names in your McAfee ePO console, see
[Set up your McAfee ePO console to integrate with Security Incident Response (SIR)](https://www.servicenow.com/docs/hDMKbfeQyuX6DFhciydfmg "The following section lists the setup steps that you're required to complete in your McAfee ePO console before installing the application from the ServiceNow Store for the integration.").

## Procedure

1. Navigate to AllMcAfee ePO IntegrationDefault Settings.
2. To edit the security tag name of the McAfee ePO integration, select Default Configuration.  
   Note:  
   Makes sure you perform this configuration after you install the McAfee ePO integration.
3. In the Initiate Malware Scan Tag Name field, enter the name of the security tag that you created in your McAfee ePO console for the initiate scan action.  
   For example, ServiceNow - Malware Scan
4. In the Isolate Host Tag Name field, enter the name of the security tag that you created in your McAfee ePO console for the isolate host action.  
   For example, ServiceNow - Isolate Host
5. If you want to don't want to use the CI trigger field on incident creation, select the Define Alternate field check box.  
   When this option is enabled, the Alternate CI trigger field choice list is displayed.Figure 1. Edit security tags
6. Choose an alternate field from the list to check for your CI search criteria.  
   For this example, as a user with the sn_si.admin role, you believe that the CI field will not be populated on the security incident on incident creation. Alternatively, you think CI information for a FQDN, host name, or IP address will be populated in the Identified CI field on the security incident, and you select the Identified CI field as an alternate. The Identified CI is selected for this example, but you can use any field on the security incident for the alternate CI.
7. In the Domain field, select a domain or group for this configuration using the search option.  
   For example, global.
8. In the Require Approval field, select the Require Approval check box if you're using Isolate Host and Remove isolation capabilities.  
   Note:  
   The Initiate Malware Scan, List Threat Events, and Get System Details capabilities do not need approval.
9. Select Update.  
   The EPO Tag Name is updated and displayed on the McAfee ePO Default Configurations list. The security tag name for the malware scan action in your ServiceNow AI Platform instance matches the name for the scan in your McAfee ePO console.

   You have successfully edited the EPO Tag Names for the malware scan and the isolate host capabilities in your ServiceNow AI Platform instance. The next step is to create a profile for your capabilities.
**Previous topic:** [Install the application and configure a server for the McAfee ePO integration](https://www.servicenow.com/docs/TAmInV5zaxya_Y5hHiqMMg "Before you invoke the workflows for the integration, install and configure the McAfee ePO application from the ServiceNow Store on your ServiceNow AI Platform instance. The configuration is required to connect to the McAfee ePO console.")  
**Next topic:** [Create an approval group](https://www.servicenow.com/docs/WaTvHUznps3J~P2moDMK~w "Create an approval group for the McAfee ePO for Security Operations integration that can approve requests for isolating host machines, restoring them to the network.")  
**Related topics**   

* [McAfee Product Documentation](https://docs.mcafee.com/bundle?value=225)

*[\>]: and then