McAfee Total Protection for Compliance

McAfee Total Protection for Compliance

IT ポリシーの監査とリスク管理の統合で、コンプライアンス対応を簡単に

概要

McAfee Total Protection for Compliance は、エージェントベースとエージェントレスの技術を使用して、管理対象システムと管理対象外システムの監査、評価、報告を行います。IT 監査の所要時間を数週間から数日に短縮できます。

Total Protection for Compliance スイートは、McAfee Policy Auditor for Desktops、McAfee Vulnerability Manager、McAfee ePolicy Orchestrator (ePO)、McAfee Labs Global Threat Intelligence service、McAfee Risk Advisor から構成されたリスク管理ソリューションです。

セキュリティに対する投資の最適化 - この統合ソリューションでは、脅威、脆弱性、対応策の情報を組み合わせて、真に危険な資産をピンポイントで特定します。勘や経験に頼らず、対策が必要な場所を特定できるので、時間を短縮し、コストを削減できます。

統合された IT ポリシー監査による総合的な保護 - 1 つのソリューションで、様々なデバイスとデスクトップにポリシーを定義し、評価することができます。Total Protection for Compliance では、個別のプロセスを実行するのではなく、重要なツールを統合することで処理を効率化し、非対応状況を短い時間で解消できます。

テクノロジの統合 - エージェント ベースのスキャン、エージェントレスのスキャン、レポート機能が統合されています。ホスト システムのスナップショットを自動的に生成し、ポリシーを詳しく分析できます。 Total Protection for Compliance では、ネットワークのコンプライアンスからアカウント、ファイル、ネットワーク、システムに対するアクセス ポリシーを設定できます。

包括的なサポート - PCI DSS、SOX、FDCC。FISMA、HIPAA などの対応状況を評価し、報告できます。

コンプライアンス作業の簡素化 - カスタム ポリシーと検査により、特定のグループの資産を対象に検査を実行したり、テンプレートを選択して監査を実行できます。

特徴・利点

セキュリティとコンプライアンスの一元管理でコストを削減

McAfee ePolicy Orchestrator (ePO) により、リスクとコンプライアンスを自動化し、一元管理できます。この共有プラットフォームを使用して、システム セキュリティの配備と管理を行います。また、エージェント ベースのシステムとエージェントを使用しないシステムの対応状況を報告します。ポリシー ベンチマークを定義して選択し、異なるタイプの資産に適用できます。

監査時間の短縮

ホストとネットワーク システムの両方で、手間のかかる監査タスクを自動化します。内部レポートを外部監査で使用できます。

リアルタイムで正確なコンプライアンス

XCCDF や OVAL などのベンチマークを使用して、法規制に対する対応状況を評価できます。内部監査と外部監査で常に最新のデータを使用できます。

新しい情報で保護状態を評価

脅威情報と脆弱性、配備された対応策を関連付けることで、リスク状況を把握し、緊急性の高い修復箇所を特定できます。

セキュリティ製品の投資効果を分かりやすく表示

脅威を具体的に示しながら、多層型防御のメリットを説明できます。

運用効率の向上

危険な状態の重要資産と脅威を関連付ける作業は時間と手間のかかるプロセスです。これらのプロセスを自動化することで、パッチ適用のコストを削減できます。

システム要件

システム要件については、個々の Web ページをご覧ください。

McAfee ePolicy Orchestrator (ePO)

McAfee Policy Auditor

McAfee Vulnerability Manager

ニュース/イベント

リソース

インフォグラフィック

Don't Be Fooled - The Security Industry’s Dirty Little Secret (英語)

Statistics on advanced evasion techniques (AETs) summarized from a Vanson Bourne survey of 800 CIOs and security managers from the US, UK, Germany, France, Australia, Brazil, and South Africa.

Connected Security Yields Smarter Defenses (英語)

Stop emerging threats with applied knowledge — everywhere, instantly.

McAfee Next Generation Firewall Business Value Snapshot — IDC (英語)

This infographic breaks down the benefits of McAfee Next Generation Firewall according to ROI, response time improvement, productivity, and more.

ソリューション概要

Intel Securityと エンパシが小売業決済 システムのセキュリティ を強化

Securing business-to-consumer retail transactions is an ongoing battle. Recent breaches at US retailers Home Depot and Target Stores highlight the serious risks, including the loss of consumer confidence, trust, and satisfaction. In addition to alienating customers, retailers that suffer a security breach may face tough scrutiny by the press, regulatory bodies, and investors. To date, most payment-system OEMs have relied on retailers—who often have limited IT and security resources—to secure their devices. Forward-thinking OEMs are seizing this opportunity and differentiating their products by designing advanced security capabilities into their devices. Discover how payment-system OEM Empathy has partnered with Intel Security to solve this pressing issue.

McAfee Endpoint Protection for SMB (英語)

McAfee Endpoint Protection for SMB—a part of the Intel Security product offering—contains the security performance and robust management of an endpoint product, in a solution that can be easily and cost-effectively rolled out and managed on-premises or through the cloud.

Advanced Threat Defense for the Email Gateway (英語)

Email is a vital communication vehicle for just about every business these days—and it is also a key threat vector for cybercrooks who are looking to steal valuable data or execute inbound attacks. As part of our unified, integrated Security Connected framework, McAfee Email Gateway and McAfee Advanced Threat Defense work together to find and freeze new, unknown, and stealthy advanced threats. For a complete end-to-end solution, add McAfee Real Time to the mix to quickly identify and fix systems impacted by advanced malware.

McAfee Advanced Threat Defense for McAfee Web Gateway (英語)

Social networks, cloud applications, and content-sharing sites have become essential business tools and IT organizations are struggling to make them safely accessible from inside and outside the corporate environment. Read this Solution Brief and see how McAfee Threat Defense for McAfee Web Gateway helps overcome the obstacles.

McAfee Enterprise Security Manager, Services Solutions for Managed Service Providers (MSPs) (英語)

McAfee Enterprise Security Manager offers the advanced scalability, flexibility, and control you need to protect your customers’ business, and grow yours.

User Classification Reduces Data Loss (英語)

Together, Boldon James Classifier and McAfee Network Data Loss Prevention reduce the risk of data loss by applying the insight of each knowledge worker to data loss prevention decisions. Classifier captures the user’s knowledge of the business value of data in the form of visual and metadata markings applied to messages and documents.

Advanced Threat Defense for Network IPS (英語)

Many of today’s unknown, zero-day threats evade traditional signature-based defenses. The addition of third-party sandbox appliances can help, but they have several limitations: high cost of deployment, reliance on a generic virtualized environments, and limited analysis techniques, making the sandbox vulnerable to crafty malware designed to bypass analysis. McAfee Network Security Platform IPS and McAfee Advanced Threat Defense work together to find sophisticated threats, freeze them so they cannot infiltrate, and fix the damage done.

Data Center Server Security Suites (英語)

McAfee Data Center Server Security Suites deliver the industry’s first comprehensive solution for securing mission-critical services in today’s mixed physical and virtual environments.

HP Endpoint Protection Services (英語)

HP and McAfee have seamlessly integrated advanced technologies for securing laptops, desktops, and mobile devices. We offer the best of HP’s outsourcing, enterprise, and security knowledge built on the rich endpoint security, unmatched threat research, and integrated management offered by McAfee.

Protect Critical Infrastructure (英語)

Securing critical infrastructure requires protecting multiple zones, including enterprise IT, SCADA, and industrial control systems (ICS), to meet compliance regulations and ensure continuous system availability. The Security Connected framework from McAfee enables you to establish a robust security posture with integrated solutions that protect endpoint, network, and data across IT, SCADA, and ICS — without impacting system availability.

Indicators of Attack (IoA) (英語)

Context-sensitive clues unlock early attack detection and action. More than raw data, organizational and situational context enrich other forms of intelligence to create indicators of attack. These early warnings reveal suspicious events, letting systems and people contain and mitigate attack activities before they lead to system compromises and data loss.

Hybrid Email Security: Maintain privacy while gaining benefits of the cloud (英語)

Information confidentiality and reduced configuration flexibility are often cited as reasons for not taking advantage of cloud-based email security. This brief discusses how hybrid security can enable organizations with these concerns to enjoy the benefits of the cloud without sacrifice.

Advanced Threat Defense for Next-Generation Firewalls (英語)

Next-generation firewalls certainly offer expanded network security for branch offices and remote locations, but they can’t find and block stealthy, advanced malware. Through the Security Connected approach from McAfee, Advanced Threat Defense and McAfee Next Generation Firewall work hand-in-hand to find and freeze today’s evasive and targeted cyberattacks.

McAfee Enterprise Security Manager and McAfee Threat Intelligence Exchange (英語)

There’s no doubt that organizations face significant challenges protecting their intellectual property and critical assets from the emerging threats that target their environments. This solutions brief highlights how McAfee® Enterprise Security Manager and McAfee Threat Intelligence Exchange work together to provide organizations with exactly what they need to fight today’s advanced threats.

McAfee Threat Intelligence Exchange and Endpoint Protection (英語)

McAfee Threat Intelligence Exchange and McAfee Advanced Threat Defense work together to provide enterprises with automated, adaptive threats response, which reduces time-to-containment of malicious files. The moment a file is convicted, the entire security infrastructure is informed and updated immediately, providing greatly enhanced visibility and control, from endpoint to network.

Security in Unison (英語)

McAfee Threat Intelligence Exchange and McAfee Advanced Threat Defense work together to provide enterprises with automated, adaptive threat response, which reduces time-to-containment of malicious files. The moment a file is convicted, the entire security infrastructure is informed and updated immediately, providing greatly enhanced visibility and control, from endpoint to network.

データシート

McAfee Advanced Threat Defense (英語)

For a technical summary on the McAfee product listed above, please view the product data sheet.

McAfee Endpoint Protection for SMB (英語)

For a technical summary on the McAfee product listed above, please view the product data sheet.

Enterprise Risk Assessment (英語)

The McAfee Foundstone Professional Services Enterprise Risk Assessment (ERA) 4-day, instructor-led course provides comprehensive, hands-on training for technology professionals seeking to elevate their skills and awareness around identifying security risks.

McAfee Solution Services — Advanced Threat Defense (英語)

For a technical summary on the McAfee product listed above, please view the product data sheet.

McAfee Data Center Security Suites (英語)

For a technical summary on the McAfee product listed above, please view the product data sheet.

McAfee SaaS vs On-Premise (英語)

McAfee industry-leading business security solutions are available in both self-managed (on-premise) and Security-as-a-Service (cloud-based) options.

McAfee Rogue System Detection (英語)

This data sheet explains how McAfee Rogue System Detection fully integrates with McAfee ePolicy Orchestrator to provide real-time discovery of rogue systems connected to the network to offer greater network visibility and protection.

パラメータシート

McAfee Web Gateway Software

マカフィー製品のパラメーターシートを掲載しています。詳細は上のリンクをご参照ください。

ホワイトペーパー

Healthcare-Friendly Security (英語)

This white paper addresses the need for healthcare-friendly security as a means of minimizing the potential for data breaches while enabling its safe, transit, and storage of patient information in a clinical setting. McAfee, a part of Intel Security, provides solutions that integrate security software with hardware to empower healthcare practitioners with flexible technology options that enable them to deliver the best possible care.

Low Hanging Fruits: The Top Five Easiest Ways to Hack or Get Hacked (英語)

How familiar are you with low-hanging fruit — the easiest ways for attackers to gain entry to your network and potentially run off with your valuable data? This white paper explores penetration tests that you can perform at your organization to gain an understanding of how to apply the proper defenses to prevent exploitation of the top five low-hanging fruit.

Achieving Security through Compliance (英語)

This paper will illustrate how a well-structured security governance program with fully developed and implemented policies, plans, and procedures will strengthen an organization’s security posture.

Discover. Protect. Expand. (英語)

Modern hybrid data centers, which embrace physical, virtual, and cloud servers, require a new security mindset. The biggest challenges faced by IT in this type of environment is workload discovery, comprehensive security with minimal performance impact, and management. This white paper offers insights into how McAfee Server Security Suites tackles all of these challenges and provides better visibility across the entire enterprise data center.

Microsoft Windows 8 and McAfee Technology Deliver Security (英語)

At McAfee, our global research teams continually analyze the threat landscape. Today’s threats to enterprise endpoints are more complex, more numerous, and more varied than ever before. If history repeats itself, fully expect Windows 8 to be attacked at a number of different levels in the first few months.

Seven Reasons Why McAfee Enterprise Security Is Your Best Choice for Microsoft Windows 8 (英語)

When it comes to protecting Windows 8, the McAfee difference is simple: one vendor provides a complete, state-of-the-art security portfolio of endpoint, server, cloud, network, data, and web and email solutions that defend real-world networks, including Microsoft, Apple, and Linux operating systems and thousands of applications.

Strategies to Mitigate Targeted Cyber Intrusions McAfee Capabilities (英語)

Strategies to mitigate targeted cyber institutions are mapped to McAfee capabilities — addressing the Top 35 Mitigation Strategies from the Australian Defence Signals Directorate (DSD).

SANS White Paper: Be Ready for a Breach with Intelligent Response (英語)

How do we get more visibility into attacks across our environments, improve our response, and reduce response time? The solution is automating functions that should be automated and connecting the dots between detection systems and response. Connecting these dots and applying intelligence provides responders rich context into the observed behaviors for taking action. Integrating these processes improves accuracy, while reducing time, manpower, and costs involved in detecting and managing events. This white paper explores how to achieve this.

Calculating the Business Value of Next Generation Firewall — IDC (英語)

This white paper articulates the business benefits derived by companies that have deployed a NGFW solution. The data is based on in–depth interviews with eight McAfee customers. These companies were mostly large organizations with an average employee base of 7,082. Interviewees came from a variety of industries — energy, financial services, manufacturing, retail, service provider, technology, and education.

レポート

Gartner Report: Avoid These Dirty Dozen Network Security Worst Practices (英語)

This report identifies 12 commonly observed network security practices that reduce network availability, increase expenditure or risks, and alienate end users.

Gartner Report: Magic Quadrant for Endpoint Protection Platforms (英語)

Intel Security named a Leader in 2015 Gartner Magic Quadrant for Endpoint Protection Platforms.

McAfee rated in Gartner Critical Capabilities for SIEM. (英語)

As a companion to the Gartner Magic Quadrant for SIEM, the Gartner Critical Capabilities report for SIEM helps IT security organizations compare their requirements with the most common SIEM use cases. Discover in-depth how Gartner rates McAfee SIEM by critical capabilities.

NSS Labs Product Assessment Brief: McAfee Advanced Threat Defense (英語)

This report reviews McAfee Advanced Threat Defense, outlining strengths, weaknesses, opportunities and threats.

When Minutes Count (英語)

How experts fight advanced threats with real-time SIEM and identification of eight key indicators of attack.

Magic Quadrant for Intrusion Prevention Systems: Leader and Visionary (英語)

Leading research firm Gartner, Inc. has placed Intel Security in the leaders quadrant in its “Magic Quadrant for Intrusion Prevention Systems”. This marks the eighth consecutive time that McAfee was named a leader in this quadrant.

Phishing Deceives the Masses: Lessons Learned from a Global Assessment (英語)

This report takes an in-depth look at what can be learned from the McAfee Phishing Quiz, and how business can build defenses against phishing attacks.

Best Practices for Data Loss Prevention: A Process, Not a Technology (英語)

Most effective DLP solutions are implemented as a business process, rather than a “set and forget” technology. This latest Gartner report identifies some key challenges CISOs face and provides guidance on a business process approach to a successful DLP implementation.

25 years of firewalls. What's next? (英語)

2014 marked the 25th anniversary of the firewall. While this humble innovation has evolved to become one of the must-have solutions of today, the question is, are firewalls ready to deal with the security threats of the next 25 years? To get to the core of this question, Intel Security commissioned IBRS, an IT advisory services company located in Asia Pacific, to facilitate a series of roundtables in November 2014, where IT security managers and security executives discussed the evolution of firewalls and the future of this technology. This report is a summary and analysis of the key conversations covered at those events.

McAfee脅威レポート:2014年第3四半期

McAfee Labsの2014年第3四半期脅威レポートと2015年脅威予測

Network Performance and Security (英語)

This report discusses how CIOs and CISOs can avoid risky tradeoffs and boost threat defenses by deploying next-generation firewalls that are built for both security and network performance.

Network Performance and Security Executive Summary (英語)

This is the executive summary to the report discussing how CIOs and CISOs can avoid risky tradeoffs and boost threat defenses by deploying next-generation firewalls that are built for both security and network performance.

What's Next: Industry Experts Speak Out on The Network Performance and Security Trade-Off (英語)

Industry Experts Speak Out: The Network Performance and Security Trade-Off report is a collection of insights and opinions from network security experts discussing the common and risky tradeoff many organizations are forced to make between network performance and security.

SANS Analytics and Intelligence Survey (英語)

This paper explores the use of analytics and intelligence today and exposes the impediments to successful implementation. Organizations that are deploying analytics and intelligence properly are experiencing faster response and detection times, as well as greater visibility. However, many are confused about how to integrate and automate their intelligence collection processes.