McAfee Threat Intelligence Exchange

McAfee Threat Intelligence Exchange

Adaptive threat prevention

Next Steps:

Overview

McAfee Threat Intelligence Exchange delivers a cohesive framework where security products collectively pinpoint threats and act as a unified threat defense system providing security resilience and immunity to infections. Threat Intelligence Exchange significantly optimizes threat prevention by narrowing the gap from encounter to containment from days, weeks, and months down to milliseconds.

Apply the power of knowledge — Threat Intelligence Exchange makes it possible for administrators to easily tailor comprehensive threat intelligence from multiple intelligence data sources. This customization empowers administrators to assemble, override, and tune the intelligence source information so that they can modify protection for their environment and organization.

Orchestrate in real time — Threat Intelligence Exchange is the first solution to use the McAfee data exchange layer, a bidirectional communications fabric enabling security intelligence, and adaptive security through product integration simplicity and context sharing. The data exchange layer supports the automatic configuration of products, reducing errors and eliminating effort to lower implementation and operational costs of integration.

Supercharge existing endpoint protection — Threat Intelligence Exchange provides breakthrough endpoint protection, using McAfee VirusScan Enterprise to make accurate file execution decisions. Endpoints will also be protected based on malware detected by network gateways, while network gateways block access based on endpoint convictions.

Advanced Targeted Attacks: It Takes a System.

Features & Benefits

Comprehensive threat intelligence

McAfee Threat Intelligence Exchange makes it possible for administrators to easily tailor comprehensive threat intelligence from global data sources, such as McAfee Global Threat Intelligence (GTI) and third-party feeds, with local threat intelligence sourced from real-time and historical event data coming from endpoints, gateways, and other security components.

Immediate visibility into the presence of advanced targeted attacks

The McAfee data exchange layer enables security components to dynamically join the McAfee Threat Intelligence Exchange. Shared insights bring deeper awareness of the threats targeting an organization. Attacks are discovered through the endpoints, gateways, and other security components united in providing real-time surveillance.

Proactive threat protection

Threat details collected from malware encounters at endpoints and network gateways can propagate through the data exchange layer in milliseconds, educating all security components to proactively immunize against newly detected threats.

Unmatched operational effectiveness lowers security cost of ownership

While increasing security resiliency, security cost of ownership is lowered by extending existing McAfee security detection, prevention, and analytic technology investments to proactively and efficiently protect your organization as soon as a threat is revealed.

System Requirements

McAfee Threat Intelligence Exchange requires the following products:

  • McAfee ePolicy Orchestrator 5.1
  • McAfee Agent 5.0
  • McAfee VirusScan Enterprise 8.8, Patch 4

 

Resources

Data Sheets

McAfee Threat Intelligence Exchange

For a technical summary on the McAfee product listed above, please view the product data sheet.

White Papers

Advanced Targeted Attacks: It Takes a System

Adaptive intelligence and real-time communications orchestrate protection in the McAfee Security Connected Platform.

Community

Blogs

  • How McAfee SIEM Helped Cologne Bonn Airport’s Security Take Flight
    Karl Klaessig - August 20, 2014

    Timing is everything in an airport and to handle the growth in travelers and airlines at Cologne Bonn, the IT infrastructure includes several large networks and various system architectures, which must be harmonized and centrally operated. Cologne Bonn is a thoroughly modern airport that has many advanced procedures in place to help them manage everything efficiently. […]

    The post How McAfee SIEM Helped Cologne Bonn Airport’s Security Take Flight appeared first on McAfee.

  • July #SecChat Recap – Targeted Attacks Set Sights on Vital Systems
    McAfee Enterprise - August 12, 2014

    When targeted attacks such as Operation Dragonfly began their offensive against vital infrastructure systems, the security community took notice. These cyber-attacks use a multitude of intrusion methods with the intent to disrupt entire nations’ economies. Not only should targeted attacks be of significant concern for those who dwell within the infosec community, but members of […]

    The post July #SecChat Recap – Targeted Attacks Set Sights on Vital Systems appeared first on McAfee.

  • The Evolution of SIEM: Part 1
    Karl Klaessig - August 7, 2014

    They say you can’t teach an old dog, new tricks—or can you? The technology landscape has changed dramatically over the last 10 years, and many security approaches organizations previously relied on are no match for today’s advanced threats. Tools like Security Information and Event Management (SIEM) have become critical to securing an increasingly complex network […]

    The post The Evolution of SIEM: Part 1 appeared first on McAfee.

  • The Economic Impact of Cybercrime and Cyber Espionage
    Michael Sentonas - August 6, 2014

    Extracting value from the computers of unsuspecting companies and government agencies is a big business for criminals. The past 12 months has seen a continued increase in the number and complexity of advanced malware threats affecting business and government operations.  The impact of cybercrime and cyber espionage is no longer a conversation amongst information security […]

    The post The Economic Impact of Cybercrime and Cyber Espionage appeared first on McAfee.

  • Air, Clouds and Factories = Transformation
    Lorie Wigle - August 5, 2014

    Intel estimates that 85% of industrial system devices are not networked today.  But that’s changing for very good reasons. Industrial control systems are part of the rapid evolution to exploit connectivity, big data and cloud computing.  Manufacturers are designing in new capabilities as their customers pursue advances in automation, and gateway devices are proliferating to […]

    The post Air, Clouds and Factories = Transformation appeared first on McAfee.

Threats and Risks