은폐형 공격은 정교한 기술을 사용하여 숨고, OS 외부에서 작동하거나 엔드포인트 간 동적 이동으로 공격자의 작업을 감출 수 있습니다. 대부분의 회사에는 인터넷으로 연결된 여러 장치가 포함된 빈틈이 많은 네트워크가 있으며 해당 장치는 기존의 안티바이러스 또는 침입 방지 시스템을 압도하는 이와 같은 공격에 대한 진입점으로 사용될 수 있습니다.
McAfee의 Security Connected 접근 방식은 은폐형 공격을 차단하고 탐지하고 물리치는 계층화된 보안 제어 기능을 구현하는 데 도움이 됩니다. 이 솔루션 안내서는 실시간으로 은폐형 공격을 중지시키고, 수동 상관 및 응답 시간을 최소화하고 신속한 위협 탐지 과정을 용이하게 하고 상황에 적절한 경보를 생성하여 보다 더 정확한 사고 대응을 할 수 있게 하며, 교정, 포렌직 및 법률 비용을 줄여주는 도구 및 제어 기능에 대한 개요를 보여 줍니다.
The McAfee solution has two primary components: McAfee ePolicy Orchestrator (McAfee ePO) software and McAfee Enterprise Security Manager, with additional integrations to extend visibility and control across the entire security and compliance management environment.
McAfee integrates data and processes to make vulnerability management more effective and efficient. Our approach combines asset discovery and management, comprehensive vulnerability scanning, flexible reporting, and remediation workflows into a single vulnerability assessment solution.
The McAfee solution is multifaceted, integrated, and built on the real-time sharing of information.
McAfee endpoint security solutions provide a layered defense to protect PCs, providing antimalware and antivirus defenses, encryption, access control, and safe web browsing features.
McAfee fights rootkits by using real-time memory and CPU protection, protecting against known and unknown attacks, and getting beneath the operating system.
McAfee enables enterprises to collect, analyze, and preserve security forensic information. With a solution that includes content- and context-aware SIEM, McAfee provides alerts to security events, as well analysis on how the attacked occurred, affected users, and compromised data — so you can better understand the severity of a security breach.
The McAfee solution has two primary components: McAfee Firewall Enterprise and McAfee Network Security Platform. The McAfee Firewall and the IPS appliance both have add-on features that can optimize your visibility into the network. McAfee SIEM and other optional products help extend visibility and analytics to more aspects of network traffic.
While waking systems to scan and providing remote repair capabilities seem like very different issues, they are both solved through McAfee integration with Intel® vPro® Active Management Technology (Intel AMT). Leveraging the McAfee ePolicy Orchestrator (McAfee ePO) agent and centralized management environment, McAfee ePO Deep Command runs on desktops and laptops with the second generation Intel Core™ i5 and i7 vPro technologies.
McAfee safeguards mission-critical application servers with a security solution that protects against malware, vulnerabilities, and exploits; enforces change management processes; prevents the installation of unauthorized applications; and manages compliance.
The McAfee approach to database security monitors database activity and changes, offers protected auditing tools, enables virtual patching to avoid database downtime, and provides compliance and regulatory templates.
McAfee products provide a multi-layered email security solution managed by a single console for the visibility and control needed to effectively protect against emerging email threats.
File servers hold sensitive data and require security controls that guard against data-stealing malware and unauthorized system changes. McAfee protects file servers with a solution that includes antimalware and antivirus protection, change monitoring and enforcement, dynamic whitelisting, network intrusion protection, and data loss prevention.
McAfee protects the network perimeter with a solution that integrates firewall and network intrusion prevention. It effectively inspects inbound traffic at the network edge; leverages real-time file and network connection reputation data from McAfee Global Threat Intelligence; enforces policies; implements comprehensive antivirus, antispam, and encryption technologies; and inspects for emerging malware, zero-day attacks, botnets, denial-of-service attempts, and advanced targeted attacks.
McAfee solutions will help you understand your web server infrastructure and protect each web server against the vulnerabilities, attacks, and threat agents that could disrupt it.
The McAfee solution provides real-time protection against attacks on your DHCP servers through multiple levels of protection. McAfee VirusScan Enterprise, McAfee Application Control, and McAfee Change Control are deployed directly on the DHCP servers. In addition, McAfee Policy Auditor can be used to perform regularly scheduled security audits to ensure that security policies applied to the DHCP servers are always being enforced. McAfee ePolicy Orchestrator (McAfee ePO) connects all of these elements into a single management environment, so you can view status and monitor events within one console.
The McAfee solution provides real-time protection against attacks on your DNS Servers through deployment of McAfee VirusScan Enterprise, McAfee Application Control, and McAfee Change Control on your DNS Servers. In addition, McAfee Policy Auditor can perform regularly scheduled security audits to ensure that security policies applied to the DNS Servers are always being enforced.
Provide effective security for laptops. McAfee protects laptops with a solution that integrates antimalware, data loss prevention, data protection, safe web browsing features, and complete visibility and control that enables IT to deploy security updates on laptops, regardless of the Internet connection.