McAfee Integrity Control

McAfee Integrity Control

Protect point-of-service systems from unauthorized change

Next Steps:

Overview

McAfee Integrity Control blocks unauthorized applications and change on fixed-function, point-of-service infrastructures, including ATMs, point-of-sale (POS) systems, and kiosks. Combining industry-leading whitelisting and change control technology, Integrity Control prevents out-of-policy changes while still allowing updates from authorized sources. It boosts control over change policies and effectively secures devices, using a centrally-managed and efficient solution.

Comprehensive change policy enforcement — Get continuous change detection capabilities, while proactively preventing unauthorized, out-of-policy change attempts. Integrity Control links protection directly to policy and verifies changes against the source, time window, or approved change ticket. Changes outside of policy are blocked, greatly reducing change-related outages and compliance violations.

Viable security for fixed-function devices — Integrity Control uniquely extends a layer of protection to devices with a fixed CPU or memory, including POS terminals, ATMs, and medical imaging systems that perform critical functions and often store sensitive data. A low-overhead footprint does not impact system performance, and it is equally effective in standalone mode, without network access.

Centralized deployment and management — Get seamless integration with McAfee ePolicy Orchestrator (McAfee ePO) software to ease deployment, management, and reporting. The single McAfee ePO console lowers the cost of ownership by consolidating security and compliance management, eliminating the need to manage data in two separate systems. Streamlined remote deployment via the McAfee ePO platform easily manages and reports on large enterprise rollouts, all from a central location.

An efficient, transparent solution — Integrity Control runs transparently on fixed-function systems, enables the entire point-of-service infrastructure to be monitored without impact, and can be set up quickly. This flexible, affordable, and secure solution dynamically manages whitelists and supports multiple configurations for different business needs and devices.

ESG Risk Management Technology brief
The Case for Continuous Compliance

Features & Benefits

Block unauthorized applications and change attempts

Ensure that only approved software runs on the point-of-service infrastructure, without imposing additional operational overhead. McAfee Integrity Control easily blocks unauthorized, vulnerable, or malicious applications that can compromise the security of critical systems.

Link change protection to policy

Verify changes against the source, time window, or approved change ticket. Changes attempted outside of policy are blocked, and the attempt is logged and sent as an alert to administrators, reducing outages and compliance violations.

Monitor file integrity and file changes

Check files and directories for changes to content, permissions, or both. Integrity Control provides continuous file integrity monitoring, essential for testing and verifying the security of an environment and meeting critical compliance requirements, including PCI DSS. It delivers comprehensive information about every change, including the user and the program used to make the change.

Gain increased control over fixed-function systems

Extend a layer of protection to devices with a fixed CPU or memory, including POS terminals, ATMs, and medical imaging systems, with a solution that does not impact system performance.

Meet and sustain PCI DSS compliance

Count on continuous information about change events across the point-of-service infrastructure to comply with PCI DSS requirements. Integrity Control details which server or servers originated the change, when it was made, which user made the change, how the change was made, what content inside the file changed, and whether the change was approved.

Get dynamic whitelisting via a trusted source

Eliminate the need for IT administrators to manually maintain lists of approved applications. Instead, IT departments can adopt a flexible approach, relying on a repository of trusted applications that run on endpoints. This prevents execution of all unauthorized software scripts and dynamic link libraries (DLLs), and further defends against memory exploits.

Centralize deployment and management through McAfee ePO

Get seamless integration with McAfee ePolicy Orchestrator (McAfee ePO) software to ease deployment, management, and reporting. The single McAfee ePO console consolidates security and compliance management, lowering TCO.

System Requirements

For a complete list of system requirements, see the Platform Support Matrix.

Demos / Tutorials

Demos

Use a single solution and achieve continuous compliance with McAfee Configuration Control.

Learn how McAfee Risk and Compliance products scan your entire network, providing complete visibility and ensuring proper protection.

Tutorials

Customer Stories

MTXEPS

MTXEPS relies on McAfee Integrity Control to prevent unauthorized changes on point-of-service systems, boosting compliance and ensuring availability.

Highlights
  • Protected MTXEPS against malware attacks, data breaches, and unauthorized system changes
  • Provided real-time, system-wide visibility into attempted or actual changes to devices
  • Helped ensure that security exceeded PCI compliance standards

NYC Department of IT and Telecommunications

NYC Department of IT and Telecommunications uses McAfee for for vulnerability management, endpoint encryption, and other areas of security functionality.

Highlights
  • Increased protection with a savings of $18 million
  • Provided centralized control across highly distributed IT environment

News / Events

News

No results found

Events

No results found

On Demand

No results found

Resources

Data Sheets

McAfee Embedded Control

For a technical summary on the McAfee product listed above, please view the product data sheet.

McAfee Embedded Control - Retail

For a technical summary on the McAfee product listed above, please view the product data sheet.

Solution Briefs

White Papers

Community

Forums

No results found

Blogs

  • NCCDC 2013 – Red Team Recap
    Jim Walter - May 07, 2013
              This past April (4/19 to 4/21) I had the great pleasure and experience of joining the Red Team at 9th NCCDC competition.   It was actually my 2nd year on the Red Team and 4th year to attend in total (I judged in 2010 and 2011).  McAfee is actually a perpetual Read more...
  • RDP+RCE=Bad News (MS12-020)
    Jim Walter - March 14, 2012
    See March 15 and 16 updates at the end of this blog. —————————————————-   The March Security Bulletin release from Microsoft was relatively light in volume. Out of the six bulletins released, only one was rated as Critical. And for good reason. MS12-020 includes CVE-2012-0002. This flaw is specific to the Remote Desktop Protocol (RDP) present on Read more...
  • An Update on DNSChanger and Rogue DNS Servers
    Jim Walter - March 06, 2012
    In late 2011, the FBI released documents and data focusing on “Operation Ghost Click.” This malicious operation, leveraging a variety of DNSChanger-type malware, was defined by the FBI as an “international cyber ring that infected millions of computers.” Associated malware samples and events can be traced back several years, and multiple platforms were targeted. To this day many remain Read more...
  • McAfee Q4 Threats Report Shows Malware Surpassed 75 Million Samples in 2011
    David Marcus - February 21, 2012
    Today we released our Fourth Quarter 2011 Threat Report, revealing that malware surpassed the our estimate of 75 million unique malware samples last year. Although the release of new malware slowed a bit in Q4, mobile malware continued to increase and recorded its busiest year to date. Malware The overall growth of PC-based malware actually Read more...
  • Cultural Security: Promoting Security Policies Using Organizational Culture
    Steven Fox - September 06, 2011
    Most of us refer to security policies in much the same way as we refer to our car manuals – when something unexpected happens.  We know these documents have useful information.  However, their utility is tied to situations where answers do not present themselves readily. According to Chris Noel, SVP of Product Management at ANXeBusiness, Read more...