McAfee Network User Behavior Analysis

McAfee Network User Behavior Analysis

Continuous, cost-effective visibility inside your network

Overview

McAfee Network User Behavior Analysis gives you a continuous, real-time view of user behavior and activity across your complex network environment. It replaces manual detection efforts, such as log analysis, with automated discovery and analysis based on existing network flow data, as well as application and identity data to deliver reliable results and a clear course of action.

With Network User Behavior Analysis, you get:

Intuitive, accurate information — In a single view, Network User Behavior Analysis shows you the actual user, group, and role associated with each action on the network. It correlates behavior with your existing security policies to show violations. It gives you this information in real time, not after the fact, so you can pinpoint potential risks and make decisions quickly and decisively.

Lowered costs and enhanced security — By automating labor-intensive detection and analysis tasks, Network User Behavior Analysis reduces the cost of keeping your network safe from risks, including insider threats.

Simplified compliance and auditing — Network User Behavior Analysis makes audit preparation faster and easier with ongoing monitoring to ensure compliance with PCI DSS, FISMA, SOX, HIPAA, and GLBA.

Features & Benefits

Reduce risk

Know what users are doing inside your network at all times. Compare user activity against security and business policies to minimize security risks and legal liability. Network User Behavior Analysis complements access control solutions by verifying that users are not bypassing access controls, and helps monitor post-connect user behavior.

Increase efficiency and lower costs

Automate labor-intensive discovery and analysis of what users are actually doing to save time and money. With more accurate and tamperproof information from Network User Behavior Analysis, you can identify and respond to threats more quickly and with greater confidence. Since it provides an intuitive, complete view of who is doing what and where across your network, Network User Behavior Analysis is proven to reduce the cost, effort, and risk associated with network planning and changes.

Enhance user-identity capabilities

Get detailed information about the users who access business-critical applications. Dynamic integration with user directories provides each user’s name, role, and policy context. Any changes made in the directory automatically filter down to Network User Behavior Analysis Monitors.

Simplify compliance and auditing

Make audit preparation faster and easier with ongoing monitoring to ensure compliance with PCI DSS requirements, as well as FISMA, SOX, HIPAA, and GLBA regulations.

Deploy cost-effective, scalable monitoring

Enable out-of-band monitoring with no network reconfiguration. Network User Behavior Analysis Monitor utilizes packet capture (pcap) and network flow data, requires no agents, no application integration, and no recoding. For identity-based monitoring, Network User Behavior Analysis builds on the identity and role information in your existing directories.

Leverage your existing infrastructure

Integrate Network User Behavior Analysis quickly and easily with Active Directory and LDAP-based directories, network routers and switches, non-Microsoft Windows identity clients like Centrify, and flow-based data from Cisco and Juniper.

System Requirements

These are minimum system requirements only. Actual requirements will vary depending on your environment. Technical information provided by Intel. Specifications may change at any time and without prior notice.

McAfee Network User Behavior Analysis Monitor Appliance

  • Technical specifications
    • 1 Intel Xeon 5130, 2 GHz, 1,333 MHz, 4-MB cache, dual-core CPU (for Monitor SE, Flow Monitor SE, and Flow Monitor: 1 Xeon 5150, 2.66-GHz CPU)
    • Two 250 GB, 32-MB cache, 7.5K RPM SATA II, 3.5" hard drives
    • 4 GB RAM
  • Power & BTU specifications
    • Max. surge amps = 9.5
    • Max. running amps = 8.5
    • Avg. running amps = 6.25
    • Watts = 750
    • BTU/hr. = 2,550
  • Dimensions
    • Rack-mountable 1U device
    • 17"W x 28 1/2"D x 1 3/4"H
  • Weight
    • 30 lbs.
  • Temperature
    • Operating temperature: 50°–90° F / 10°–35° C (maximum change rate not to exceed 10° C per hour)
    • Non-operating temperature: -40°–70° C
    • Non-operating humidity: 90%, non-condensing at 28° C
  • Compliance
    • UL60950 – CSA 60950 (USA/Canada)
    • EN60950 (Europe)
    • IE60950 (International)
    • CE – Low-voltage Directive 73/23/EEE (Europe)
  • Certification
    • Common Criteria EAL 3 Certified
    • U.S. Department of Defense accreditations for operating in SIPRNet, NIPRNet, and JWICS

McAfee Network User Behavior Analysis Control Center Appliance

  • Technical specifications
    • 1 Intel Xeon 5150, 2.66 GHz, 1,333 MHz, 4-MB cache, dual-core CPU
    • Two 150 GB, 16-MB cache, 10K RPM SATA hard drives
    • 4-GB RAM
  • Power & BTU specifications
    • Max. surge amps = 9.5
    • Max. running amps = 8.5
    • Avg. running amps = 6.25
    • Watts = 750
    • BTU/hr. = 2,550
  • Dimensions
    • Rack-mountable 1U device
    • Dimensions: 17"W x 28 1/2"D x 1 3/4"H
  • Weight
    • 30 lbs.
  • Temperature
    • Operating temperature: 50°–90° F / 10°–35° C (maximum change rate not to exceed 10° C per hour)
    • Non-operating temperature: -40°–70° C
    • Non-operating humidity: 90%, non-condensing at 28° C
  • Compliance
    • UL60950 – CSA 60950 (USA/Canada)
    • EN60950 (Europe)
    • IE60950 (International)
    • CE – Low-voltage Directive 73/23/EEE (Europe)
  • Certification
    • Common Criteria EAL 3 Certified
    • U.S. Department of Defense accreditations for operating in SIPRNet, NIPRNet, and JWICS

Resources

Data Sheets

McAfee Network User Behavior Analysis

For a technical summary on the McAfee product listed above, please view the product data sheet.

McAfee Network User Behavior Analysis Studio

For a technical summary on the McAfee product listed above, please view the product data sheet.

Solution Briefs

User Behavior Analysis: Gaining Real-Time Cost-Effective Visibility into Who Is Doing What, Where on Your Network

McAfee Network User Behavior Analysis' automated, identity-based monitoring improves visibility into your network, reduces risk, and eases compliance.

Community

Blogs

  • At Intel Security, Protecting Customers Takes Precedence Over Seeking Headlines
    Christiaan Beek - November 21, 2014

    One question I often hear is “When will Intel Security (McAfee) publish a report on the latest threat?” It seems to be a hot trend today for security companies to offer reports with topics such as “Operation X” or “Malware Y,” or to trumpet how many zero-day vulnerabilities they have found. Do we now measure […]

    The post At Intel Security, Protecting Customers Takes Precedence Over Seeking Headlines appeared first on McAfee.

  • White Networks
    Tyson Macaulay - November 14, 2014

    Internet of Things (IoT) needs “white networks” to scale and deliver the assurance we require for machine-things; white as in “clean and pure”. The IoT will contain all the devices on the current internet, plus many new devices used for machine-to-machine and industrial applications and services.  In contrast to a “white network” I would assess […]

    The post White Networks appeared first on McAfee.

  • When Fingerprints Fail (Blog 1 of 4)
    Steve Grossenbacher - November 13, 2014

    We’ll be releasing four blog posts over the next week.  Each blog will contain a repeated clue word to help you solve the puzzle below.  Track all four clues to help solve the final puzzle and a chance to win a Nikon D3200 DSLR camera and 18-55mm lens!.   To enter the contest, after the […]

    The post When Fingerprints Fail (Blog 1 of 4) appeared first on McAfee.

  • Exploit Kits Improve Evasion Techniques
    Rajesh Nataraj KP - November 12, 2014

    Exploit kits are toolkits that malicious developers use to take advantage of client-side vulnerabilities, targeting web browsers and programs that can be accessed through browsers. The most common exploit targets are Java, Flash, PDFs, and Silverlight. Exploit kits use lots of techniques to evade detection by security products. Exploit kits use several common techniques: Code […]

    The post Exploit Kits Improve Evasion Techniques appeared first on McAfee.

  • Farewell to FOCUS 14
    McAfee Enterprise - November 6, 2014

    While the dust in Las Vegas may still be settling from three jam-packed days of security discussions, demos, expert panels, and more, we‘ve brought back with us valuable takeaways and tales from FOCUS 14. During the 7th annual McAfee FOCUS conference, brought to you by Intel Security, we talked with partners about the future of […]

    The post Farewell to FOCUS 14 appeared first on McAfee.