McAfee Network Security Platform

McAfee Network Security Platform

Uma solução de segurança de inteligência singular, capaz de descobrir e bloquear ameaças sofisticadas na rede

Próximas etapas:

Visão geral

O McAfee Network Security Platform é uma solução de segurança inteligente que descobre e bloqueia ameaças sofisticadas na rede. Usando diversas técnicas avançadas de detecção sem assinaturas, como Advanced Threat Defense, emulação em tempo real e integração a terminais, ele vai além da mera correspondência de padrões, oferecendo defesa contra ataques indetectáveis desconhecidos com precisão extrema. A plataforma de hardware de nova geração pode expandir para velocidades superiores a 40 Gbps para atender às necessidades de desempenho das redes mais exigentes.

Com sua abordagem Security Connected para o gerenciamento da segurança, o Network Security Platform utiliza diversas tecnologias de segurança para lidar coletivamente com ataques ardilosos e evasivos, que não são detectados com uma única abordagem. Essa aplicação inteligente de heurística comportamental utiliza canais do McAfee Global Threat Intelligence em tempo real para identificar com precisão ataques maliciosos para os quais não existem assinaturas.

Todas as informações de segurança e gerenciamento são exibidas em um formato correlacionado, que reduz o tempo necessário e o erro humano nas investigações. As tarefas são energizadas quando os detalhes são priorizados, de modo que apenas os dados necessários sejam revelados progressivamente, no momento exato em que se fazem necessários. O tempo economizado e os erros evitados reduzem os custos operacionais e liberam a equipe para trabalhar em outros projetos. O Network Security Platform simplifica as operações de segurança com visibilidade além da camada 7 para expôr padrões de ataques ocultos em prol de uma resposta rápida e precisa a ataques via rede.

AV-Test validates McAfee signature-less blocking at 99.98%.

Read Report

McAfee leads in IPS security and value

Download NSS Labs Report

Recursos e vantagens

Obtenha proteção incomparável contra as ameaças

A prevenção incomparável contra ameaças é fruto da identificação de ataques conhecidos e desconhecidos. Usando diversos mecanismos de detecção sem assinaturas, bem como detecção ultraeficiente de assinaturas baseada em vulnerabilidades, essa plataforma de IPS de nova geração protege habilmente contra malware avançado e ataques de dia zero, com precisão sem precedentes. A inspeção de malware avançada e sem assinaturas oferece proteção abrangente contra o ataque desconhecido, enquanto as defesas com assinaturas de baixo toque oferecem proteção eficiente contra ameaças conhecidas, exigindo pouco trabalho de administração e mantendo os custos operacionais em níveis baixos.

Obtenha um gerenciamento de segurança inteligente

Diminua o tempo e o conhecimento necessários para monitorar e investigar eventos de segurança, e ainda simplifique a administração de distribuições grandes e complexas. A divulgação gradual de informações fornece a informação certa, quando e onde você precisar dela, através de detalhamentos orientados. Enquanto isso, o gerenciamento hierárquico faz o dimensionamento para lidar com distribuições maiores.

Aproveite a proteção global contra malware

Obtenha uma cobertura abrangente contra malware dirigindo com inteligência um portfólio de defesas antimalware. Reduza com confiança as brechas de segurança de malware, com mais defesas que qualquer outro fornecedor, contra o mais novo e letal vetor de ataques à segurança da rede.

Use nosso framework Security Connected

Aprimore a postura de segurança da rede, otimize a segurança da rede para obter maior economia de custos e alinhe a segurança da rede às iniciativas comerciais de forma estratégica. O Security Connected é a abordagem integrada da McAfee para a segurança da rede, incorporando com perfeição os dados e os fluxos de trabalho de outros produtos de segurança.

Obtenha desempenho e expansibilidade

Obtenha um desempenho confiável para que a melhor segurança esteja disponível sob as cargas mais pesadas, conforme a rede cresce, mesmo se segmentos da rede falharem. Conte com uma taxa de transferência multigigabit de alto desempenho mesmo quando recursos de próxima geração, habilitados com failover com monitoramento de estado, estiverem disponíveis.

Ganhe visibilidade e controle

Obtenha informações sobre usuários e dispositivos que se integram perfeitamente aos controles, à análise e a aplicativos de geração de relatórios detalhados. Essa profunda visibilidade revela anomalias suspeitas que não podem ser vistas em conjunto, permitindo maior flexibilidade para o alinhamento das políticas de controle às necessidades da organização.

Demonstrações / Tutoriais

Demonstrações

Network Security Platform is an intrusion prevention appliance that uses multiple detection engines to alert on today’s stealthy malware.

Use event correlation and progressive disclosure workflows to prioritize events, improve detection, and speed investigation.

Network Security Platform uses new advanced intrusion detection capabilities to uncover both known and unknown botnets.

Network Security Platform includes application visibility and control of over 1,100 applications and protocols.

Prevent denial-of-service attempts through connection limiting based on geo-location, IP reputation, and a number of other factors.

McAfee Endpoint Intelligence provides real-time, per-flow endpoint traffic correlation. This solution leverages intelligence in the network and on every Windows host to reveal relationships between endpoint executables and network traffic flows.

Network Security Platform incorporates McAfee Global Threat Intelligence to check the reputation of network communications based on billions of unique file, IP, URL, protocol, and geo-location data around the globe.

Tutoriais

Explore the key features of McAfee Network Security Platform and learn more about how it integrates with McAfee Vulnerability Manager and McAfee ePolicy Orchestrator.

Vídeos

Learn how McAfee Network Security Platform supercharges your security to avoid zero-day threats.

Your IPS needs both signature and signature-less defenses.

Prêmios / Análises

NSS Labs
NSS Labs confere à McAfee Network Security Platform a desejada classificação de produto recomendado

O NSS Labs faz uso de dezenas de critérios para testar os maiores fornecedores de prevenção de intrusões de rede do mercado. Os resultados são publicados em seus relatórios de análise de produtos. Leia o mais recente relatório Security Value Map do NSS Labs para saber como a McAfee se tornou a líder em segurança e valor na avaliação do NSS Labs.

CRN
CRN classifica McAfee como uma das 25 melhores empresas para se fazer parcerias em 2013

Consultando provedores de soluções de TI, a CRN Research classifica os 25 fornecedores de tecnologia essenciais dentre uma lista de quase 230 empresas em 12 categorias de produtos que os provedores de soluções precisam considerar ao formalizar suas parcerias hoje e no futuro. 1.000 provedores de soluções únicos de todos os tipos e tamanhos foram entrevistados.

Gartner
Magic Quadrant 2013 de sistemas de prevenção de intrusões

A McAfee é uma líder (novamente) no Gartner Magic Quadrant for Intrusion Prevention Systems.

Casos de Clientes

Bank Central Asia (English)

Bank Central Asia implemented McAfee solutions to protect its network, data, and 20,000 endpoints.

Destaques
  • Eased compliance with internal and industry regulations.
  • Resulted in time savings with centralized management.
  • Provided integrated solutions to keep computers, the network, and data protected.

City of Chicago (English)

The City of Chicago’s recently formed Information Security Office (ISO) is charged with overseeing cybersecurity across all areas of the city, including critical infrastructure within the water, aviation, and public safety departments.

Destaques
  • Maximized staff resources.
  • Malware incidents reduced by 2,000%.
  • Centralized management and analysis.
  • Integrated security event logging that captures events throughout the environment.

CSS Corp (English)

CSS Corp has deployed McAfee Network Security Platform sensors protecting network traffic at its gateways globally.

Destaques
  • Provided centralized management, control, and reporting on overall functioning of security environment
  • Ensured compliance with ISO277001 and PCI DSS
  • Contributed to network availability to meet SLAs
  • Maintained comprehensive protection from external and internal security threats

Dongfeng Nissan Passenger Vehicle Co., Ltd. (English)

With robust integration features built into ePO, users can handle data events and achieve stronger monitoring and control easily and quickly through the platform.

Destaques
  • Protected intellectual property

Eagle Rock Energy (English)

Eagle Rock Energy Partners is an energy company focused on upstream activities, including oil and gas drilling, production, and development. Eagle Rock has working oil and gas properties and development opportunities in the midcontinent area, Permian, and southeast regions of Texas, as well as Oklahoma, Arkansas, Southern Alabama, Mississippi, and Louisiana.

Destaques
  • Integrated security architecture paves the way for business expansion.
  • Comprehensive threat detection ensures that security events from every source are noted and logged.
  • The combination of McAfee Web Gateway and McAfee Advanced Threat Defense thwarts inbound threats from the Internet.
  • Intrusion prevention monitors both external and internal activity.

Macquarie Telecom (English)

McAfee solutions offer integrated protection from distributed denial-of service (DDoS) threats at the Macquarie Telecom perimeter.

Destaques
  • Fully integrated security platform easily managed from a central dashboard.
  • Visibility and control for clients over their hosted security environments.
  • Competitive advantage through partnership with a trusted technology provider.

Texas Tech University Health Sciences Center (English)

Texas Tech University Health Sciences Center (TTUHSC) offers programs in medicine, nursing, pharmacy, biomedicine and health sciences.

Destaques
  • Extensible compliance reporting.
  • Block thousands of attacks.
  • Security audits in minutes.
  • Improve visibility and productivity.

Notícias / Eventos

Recursos

Documentos

SANS Survey: Incident Response – How to Fight Back (English)

SANS recently surveyed incident response (IR) teams to get a clearer picture of what they're up against today. The results are in; most organizations lack formalized IR plans, they expressed a need to collect and correlate threat intelligence and SIEM tools are their focus for improving IR capabilities.

The Blended IPS: Leveraging Snort and Optimizing Malware Security (English)

This paper is to present the satisfied Snort user and open source security proponent with an effective way to add advanced malware detection and automated threat blocking to an existing Snort-based intrusion prevention system (IPS).

Conquer the Top 20 Critical Security Controls (English)

Critical Security Controls (CSCs) help organizations break down operational silos by providing a pragmatic blueprint detailing where to focus efforts to achieve the greatest results. This white paper maps the quick wins within the first five CSCs to associated McAfee products, services, and partner solution capabilities — all part of the Security Connected platform.

Signature-less IPS: Secure Beyond the Signature (English)

Learn how the McAfee signature-less intrusion prevention system (IPS) technology is changing the way malware is detected and blocked. Signature-based detection provides an important foundation for intrusion inspection, but a layered signature-less architecture greatly enhances malware detection and reduces the risk. Read about the seven signature-less detection methods McAfee offers and how they are transforming IPS.

Beyond Layer-7 Visibility: A Simpler Path to Endpoint Intelligence (English)

Security products with layer-7 visibility are great. But in order to dramatically improve your understanding of security events, you need to extend your vision to the specific application processes responsible for initiating a connection. It’s something we call Beyond Layer-7 Visibility.

Security Management 2.5 – Replacing Your SIEM Yet? (English)

This paper will walk you through the entire process — from soup to nuts — of evaluating, selecting, and deploying a SIEM. It offers pragmatic advice on how to get it done based on years working through this process as both consumers and vendors of SIEM technology. The process is not always painless, but we are certain it will help you avoid foundering on bad technology and inter-office politics. You owe it to yourself and your organization to ask the right questions and to get answers. It is time to slay the sacred cow of your substantial SIEM investment, and to figure out your best path forward.

The 7 Deadly Threats to 4G - 4G LTE Security Roadmap and Reference Design (English)

This paper provides a detailed review of seven threats that take on unique profiles within 4G networks. It also offers a security reference architecture to efficiently counter these threats with minimal cost or service disruption.

Security Connected from McAfee: Comprehensive, Cost-Effective Security (English)

With federal budgets trending downward and both cyberthreats and mandates heading upward, the question becomes, "Can you get comprehensive cybersecurity that provides real-time threat visibility and protection at a reasonable cost? The answer is yes."

A Prudent Approach to Next-Generation Network Security (English)

According to Enterprise Strategy Group, a prudent approach to next-generation network security requires more hands-on planning, product evaluations, and real-world testing — and less reliance on third-party lab testing and market reports alone.

McAfee Network Security Platform: The Next-Generation Network IPS (English)

This white paper discusses how the McAfee Network Security Platform can help organizations unify network security across physical and virtual environments, streamline security operations, and protect themselves from emerging malware, zero-day attacks, denial-of-service exploits and advanced targeted attacks.

Consolide a segurança de Rede para Reduzir Custos e Aumentar a Proteção da Empresa

Learn how McAfee Network Security Platform helps you realize greater consolidation benefits while minimizing project costs and disruption to your production environment.

Combate às Ameaças Avançadas Persistentes

Learn how to prevent, detect, and remediate APTs.

Defining Next-Generation Network Intrusion Prevention (English)

Gartner defines "network intrusion prevention" as an in-line security control that implements attack detection and mitigation between networks of different trust levels in real time.

Solving Critical Challenges of the Virtualized Data Center (English)

Brocade and McAfee have partnered on a portfolio of offerings that seamlessly blend network innovations and security management to address the challenges of both physical and virtual environments.

Protect Critical Assets with Virtual Patching—Closing the Vulnerability Window Using Predictive Threat Protection (English)

The McAfee virtual patching solution provides a layered approach to security risk management, while adding the ability to apply a virtual patching strategy to your existing change-management process. It combines proven defenses and security insight with real-time Global Threat Intelligence to close the vulnerability window until patching can occur through your regular change-management processes.

A nova era das redes de bots

As redes de bots (robôs), popularmente conhecidas como “botnets”, têm uma história variada. Um bot é, basicamente, uma série de scripts ou comandos, ou um programa desenvolvido para se conectar a algo (normalmente um servidor) e executar um comando ou uma série de comandos. Essencialmente, ele desempenha várias funções. Ele não precisa ser malicioso ou nocivo.

Especificações

McAfee Network Security Platform (M-Series)

Para um resumo técnico do produto McAfee listado acima, consulte o data sheet do produto.

McAfee Network Security Platform (NS-Series)

Para um resumo técnico do produto McAfee listado acima, consulte o data sheet do produto.

Virtual Network Security Platform (English)

McAfee Network Security Platform virtual sensor is a full-featured advanced intrusion prevention system (IPS) solution ready for the unique demands of virtual environments. This intelligent security solution discovers and blocks sophisticated threats in virtual networks with unmatched speed, accuracy, and simplicity.

Virtual Network Security Platform

McAfee Network Security Platform virtual sensor is a full-featured advanced intrusion prevention system (IPS) solution ready for the unique demands of virtual environments. This intelligent security solution discovers and blocks sophisticated threats in virtual networks with unmatched speed, accuracy, and simplicity.

Infographics

SANS Top 20 Critical Controls Poster (English)

The top 20 critical controls for effective cyberdefense.

Get a True Understanding of Malware DNA (English)

McAfee Network Security Platform can amplify existing signature and snort-based technologies to provide a true understanding of malware DNA.

Bury Threats Before They Bury Your Business (English)

Bury threats with McAfee’s Network Security Platform comprehensive signature-less approach to malware detection.

Relatórios

SANS Report: Critical Security Controls: From Adoption to Implementation (English)

A recent SANS survey provides an in-depth look at the primary industries adopting critical security controls and how they approach implementation.

AV-Test Signature-less IPS Report (English)

Signatures are great for blocking known attacks, but a comprehensive signature-less architecture is needed to block new and unknown attacks. AV-Test validated that McAfee signature-less inspection blocks 99.98% of malware without any signatures enabled. Read the report to learn how McAfee IPS has raised the bar on IPS inspection and enables security beyond the signature.

Data Center IPS Comparative Analysis: Total Cost of Ownership (English)

By using total cost of ownership (TCO) instead of purchase price, it is possible to factor in management of the device via labor costs associated with product installation, maintenance, upkeep, and tuning.

NSS Labs 2014 Comparative Analysis Report for McAfee Network Security Platform NS-9300 (English)

NSS Labs Ranks McAfee as a Leader in Security and Value.

NSS Labs 2013 Product Analysis Report for McAfee Network Security Platform NS-9200 (English)

NSS Labs Ranks McAfee as a Leader in Security and Value.

Magic Quadrant for Intrusion Prevention Systems 2013 (English)

McAfee Is a Leader (Again) in Gartner Magic Quadrant for Intrusion Prevention Systems

Next-Generation Network Security (English)

McAfee and Intel have joined forces to create next-generation network security that detects threats before they reach networks.

McAfee IPS Appliance Test (English)

AV-TEST performed a review of McAfee’s IPS solution for the enterprise to determine malware detection and blocking capabilities.

NSS Labs 2012 Product Analysis Report for McAfee Network Security Platform M-8000 (English)

NSS Labs tests the industry's leading Network Intrusion Prevention vendors on dozens of criteria and releases their finding in Product Analysis Reports. In this report, the McAfee Network Security Platform M-8000 is rated on its security effectiveness, performance, management, TCO and overall value.

Resumos de soluções

SIEM: cinco requisitos que resolvem os maiores problemas corporativos

McAfee spoke with SIEM users and asked them to tell us about their primary issues with SIEM. This brief lists the top five issues along with corresponding customer case studies and use cases.

McAfee Network Security Platform: Services Solutions for Managed Service Providers (MSP) (English)

With attacks on the rise, IT budgets constrained, and experienced security personnel in short supply, businesses are looking to Managed Service Providers to help fill the gap. McAfee Network Security Platform is uniquely intelligent and purpose-built to offer unmatched protection, performance, and multitenant scale for your intrusion prevention system (IPS) services.

Counter Stealthy Malware (English)

The most menacing type of cyberattack is invisible. Using sophisticated techniques to hide its presence, stealthy malware may operate outside of the OS or move dynamically across endpoints to conceal the attackers’ actions. The risk to enterprises is real, with high-profile attacks such as Operation High Roller impacting companies around the globe. Traditional antivirus or intrusion prevention systems are no match for this new breed of stealthy malware; instead, enterprises need layered security controls that work together to detect the presence and actions of stealthy malware and attackers.

Supercharge Your Security with IPS and SIEM (English)

McAfee Network Security Platform and McAfee Enterprise Security Manager bring together real-time network protection, enterprise-wide situational awareness, and a responsive, investigation platform — in a seamlessly integrated solution that identifies and blocks more threats while ensuring rapid response to successful attacks as they emerge.

Comunidade

Blogs

  • At Intel Security, Protecting Customers Takes Precedence Over Seeking Headlines
    Christiaan Beek - Novembro 21, 2014

    One question I often hear is “When will Intel Security (McAfee) publish a report on the latest threat?” It seems to be a hot trend today for security companies to offer reports with topics such as “Operation X” or “Malware Y,” or to trumpet how many zero-day vulnerabilities they have found. Do we now measure […]

    The post At Intel Security, Protecting Customers Takes Precedence Over Seeking Headlines appeared first on McAfee.

  • White Networks
    Tyson Macaulay - Novembro 14, 2014

    Internet of Things (IoT) needs “white networks” to scale and deliver the assurance we require for machine-things; white as in “clean and pure”. The IoT will contain all the devices on the current internet, plus many new devices used for machine-to-machine and industrial applications and services.  In contrast to a “white network” I would assess […]

    The post White Networks appeared first on McAfee.

  • When Fingerprints Fail (Blog 1 of 4)
    Steve Grossenbacher - Novembro 13, 2014

    We’ll be releasing four blog posts over the next week.  Each blog will contain a repeated clue word to help you solve the puzzle below.  Track all four clues to help solve the final puzzle and a chance to win a Nikon D3200 DSLR camera and 18-55mm lens!.   To enter the contest, after the […]

    The post When Fingerprints Fail (Blog 1 of 4) appeared first on McAfee.

  • Exploit Kits Improve Evasion Techniques
    Rajesh Nataraj KP - Novembro 12, 2014

    Exploit kits are toolkits that malicious developers use to take advantage of client-side vulnerabilities, targeting web browsers and programs that can be accessed through browsers. The most common exploit targets are Java, Flash, PDFs, and Silverlight. Exploit kits use lots of techniques to evade detection by security products. Exploit kits use several common techniques: Code […]

    The post Exploit Kits Improve Evasion Techniques appeared first on McAfee.

  • Farewell to FOCUS 14
    McAfee Enterprise - Novembro 6, 2014

    While the dust in Las Vegas may still be settling from three jam-packed days of security discussions, demos, expert panels, and more, we‘ve brought back with us valuable takeaways and tales from FOCUS 14. During the 7th annual McAfee FOCUS conference, brought to you by Intel Security, we talked with partners about the future of […]

    The post Farewell to FOCUS 14 appeared first on McAfee.