Content

Application-layer Attack Protection

Proactive defenses for your critical business applications

McAfee’s approach to vulnerability protection blocks application-layer attacks before they can enter your network, maintaining availability of business-critical applications, including email, HTTP/S (web), multimedia (H.323), Oracle, Citrix, SQL, VoIP (SIP), SSH, and FTP. When you replace outdated firewall and intrusion prevention systems with McAfee, our global threat intelligence lowers your exposure to new threats while allowing you time to implement patches properly. With centralized management and fine-grained policy enforcement, you can selectively apply application-level controls for multilayer security where needed, without compromising on network performance or breaking your budget.

Tab Navigation

Overview:

Key Benefits

  • Efficient blocking of application and operating system exploits—Combine protections for the best value and apply your valuable security dollars where 70 to 80 percent of attacks are concentrated
  • True visibility into and control over applications—Preserve bandwidth and manage how and by whom the most popular applications are used, including email, HTTP/S (web), multimedia (H.323), Oracle, Citrix, SQL, VoIP (SIP), SSH, and FTP
  • High performance, high security—Get advanced intrusion prevention that doesn’t clog your network; McAfee appliances range from 100 Mb/s to true 10 Gb/s performance that accommodates backbone upgrades
  • Elimination of encryption blind spots—Upgrade your firewall to decrypt and filter the increasingly prevalent attacks that use SSH, SFTP, SCP, and SSL/HTTPS
  • Real-time threat protection against unknown, zero-day attacks—Leverage McAfee’s global threat intelligence, using TrustedSource reputation technology, and effortlessly eliminate up to 70 percent of unwanted traffic
  • Protection you can distribute across your network—Deploy network security appliances where you need them to protect your perimeter, critical network segments, and remote and branch sites
  • Improved threat response through integration—Identify and evaluate threats in real time with the first risk-aware and system-aware network IPS, featuring breakthrough integration with McAfee Vulnerability Manager, McAfee ePolicy Orchestrator© (ePOTM), and host intrusion prevention
  • Streamlined management to cut costs and ease regulatory compliance—Create firewall rules using just one screen, proactively enforce appropriate application and network usage policies across the enterprise, and simplify report generation with detailed templates
  • Fast, well-informed decision making—Resolve outbreaks quickly with real-time, comprehensive, in-depth attack information displayed in highly customizable graphical reports

Products and Services:

Products

McAfee Firewall Enterprise (Sidewinder®)—Control rising firewall management costs with high-performance stateful and application inspection and centralized management and reporting trusted by Fortune 500 companies and government agencies; block attacks before they occur with reputation technology, encrypted traffic inspection, intrusion prevention, anti-virus, and content filtering

McAfee Network Security Platform—Select from our portfolio of high-throughput hardened appliances for up to 10 gigabit performance to secure applications and servers against vulnerabilities; the appliances inspect a broad range of applications and protocols and protect against known and unknown attacks

McAfee NAC Module for Network Security Platform—Purchase or upgrade McAfee network intrusion prevention systems to add essential NAC functionality, post-admission monitoring, and network enforcement to your industry-leading IPS

McAfee Network User Behavior Analysis (Securify)—Gain real-time visibility into who is doing what, and where, across the network through behavioral analysis, anomaly detection, and proactive correlation of network activity to actual user identities, groups, and roles, as well as security policies

McAfee Vulnerability Manager—Leverage our integrations to protect your most critical assets first by prioritizing IT actions based on risks and policy violations; this agentless solution or hosted service helps you protect even unmanaged assets throughout your network

Services

McAfee Maximum Access—Enhance your threat protection with exclusive, custom threat research and mitigations from the experts at McAfee Avert Labs; your dedicated researcher works with you—on site or on call—to help you understand your vulnerabilities, strengthen your security, and counter the most advanced risks

Take the Next Step

Let us show you how easy it is to reduce risk.