McAfee Enterprise Security Manager

McAfee GTI and McAfee SIEM demo

Built for big security data, McAfee Global Threat Intelligence for McAfee Enterprise Security Manager (ESM) puts the power of McAfee Labs directly into the security monitoring flow using McAfee’s high-speed, highly intelligent security information and event management (SIEM) solution.

Focus on 5: Threat Intelligence SIEM Requirements (English)

McAfee spoke with customers about integrating SIEM with Threat Intelligence and how it helped their effort to mitigate bad actors.

Focus on 5: SIEM Requirements (English)

Learn about the top five issues with SIEM: Big Security Data, Content and User Awareness, Dynamic Context, Solution Customization, and Business Value.

ESM Integration (English)

For a technical summary on the McAfee product integration listed above, please view the product data sheet.

Enterprise Security Manager

Pour un compte rendu technique sur le produit McAfee présenté ci-dessus, veuillez consulter la fiche technique correspondante.

Security Management 2.0—Time to Replace Your SIEM? (English)

This report takes a candid look at triggers for considering a new security management platform, walking through each aspect of the decision, and presenting a process to migrate.

Pike Pulse Report: Smart Grid Cyber Security Governance, Risk Management, and Compliance (English)

This Pike Pulse report presents an analysis of the current governance, risk management, and compliance (GRC) vendors that are believed to be the best positioned for the future. McAfee scores the highest in assessment of GRC vendors for smart grid security.

McAfee Positioned in Leaders Quadrant of the Magic Quadrant for SIEM (English)

Broad adoption of SIEM technology is being driven by the need to detect threats and breaches, as well as by compliance needs. Early breach discovery requires effective user activity, data access and application activity monitoring. Leading analyst firm Gartner has placed McAfee as a Leader in the Magic Quadrant for Security Information and Event Management.

[Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.]

Information Security Is Becoming a Big Data Analytics Problem (English)

Information security is becoming a big data analytics problem, where massive amounts of data will be correlated, analyzed and mined for meaningful patterns. Investments in additional tools, processes and skills will be required.

Supercharge Your Security with IPS and SIEM (English)

McAfee Network Security Platform and McAfee Enterprise Security Manager bring together real-time network protection, enterprise-wide situational awareness, and a responsive, investigation platform — in a seamlessly integrated solution that identifies and blocks more threats while ensuring rapid response to successful attacks as they emerge.

Improve Visibility and Control of Endpoints—Including Managed and BYOD (English)

ForeScout CounterACT integrates with McAfee ePO and ESM to provide this information in realtime for both managed and unmanaged hosts.

Blocage des attaques furtives

Le type le plus menaçant de cyberattaque est invisible. En utilisant des techniques sophistiquées pour cacher sa présence, une attaque furtive peut fonctionner en dehors du système d'exploitation ou déplacer de manière dynamique au niveau des terminaux de dissimuler les actions des attaquants. Le risque pour les entreprises est réel, avec des attaques de grande envergure comme l'opération High Roller impact sur les entreprises partout dans le monde. Systèmes de prévention d'intrusion ou antivirus traditionnels ne peuvent rivaliser avec cette nouvelle race d'attaque, à la place, les entreprises ont besoin de contrôles de sécurité en couches qui travaillent ensemble pour détecter la présence et les actions des programmes malveillants et des attaques furtives.

Look Inside Network Traffic (English)

The McAfee solution has two primary components: McAfee Firewall Enterprise and McAfee Network Security Platform. The McAfee Firewall and the IPS appliance both have add-on features that can optimize your visibility into the network. McAfee SIEM and other optional products help extend visibility and analytics to more aspects of network traffic.

Investigate Data Breaches (English)

McAfee enables enterprises to collect, analyze, and preserve security forensic information. With a solution that includes content- and context-aware SIEM, McAfee provides alerts to security events, as well analysis on how the attacked occurred, affected users, and compromised data — so you can better understand the severity of a security breach.

Achieve Situational Awareness (English)

The McAfee solution has two primary components: McAfee ePolicy Orchestrator (McAfee ePO) software and McAfee Enterprise Security Manager, with additional integrations to extend visibility and control across the entire security and compliance management environment.

Security Information and Event Management (English)

McAfee EDB data management technology handles all of these SIEM/logging requirements. It is designed, implemented, maintained, and tested by our world-class in-house development team to meet the demanding requirements of SIEM/logging and leverage all of the capabilities of appropriate emerging technologies such as modern operating systems, multicore CPUs, solid state and RAM drives, and large amounts of main memory.

Pike Research: Monitoring and Securing SCADA Networks (English)

This white paper examines cyber security issues for industrial control systems with a specific focus on security event monitoring as it applies to industrial control networks such as SCADA.

Les défis posés par les données de sécurité

Ce livre blanc se penche sur le problème des grands volumes de données de sécurité et met en évidence les principaux critères que les organisations doivent prendre en compte pour traiter les informations de sécurité à la lumière du paysage dynamique des menaces que nous connaissons aujourd'hui.

Continuous Compliance: Is It a Reality? (English)

In this paper, we explore the subject of continuous compliance versus audit-driven compliance, as well as how an ongoing approach to compliance makes compliance a positive force for securing data and systems.