McAfee Network User Behavior Analysis

McAfee Network User Behavior Analysis

Continuous, cost-effective visibility inside your network

Next Steps:

Overview

McAfee Network User Behavior Analysis gives you a continuous, real-time view of user behavior and activity across your complex network environment. It replaces manual detection efforts, such as log analysis, with automated discovery and analysis based on existing network flow data, as well as application and identity data to deliver reliable results and a clear course of action.

With Network User Behavior Analysis, you get:

Intuitive, accurate information — In a single view, Network User Behavior Analysis shows you the actual user, group, and role associated with each action on the network. It correlates behavior with your existing security policies to show violations. It gives you this information in real time, not after the fact, so you can pinpoint potential risks and make decisions quickly and decisively.

Lowered costs and enhanced security — By automating labor-intensive detection and analysis tasks, Network User Behavior Analysis reduces the cost of keeping your network safe from risks, including insider threats.

Simplified compliance and auditing — Network User Behavior Analysis makes audit preparation faster and easier with ongoing monitoring to ensure compliance with PCI DSS, FISMA, SOX, HIPAA, and GLBA.

Features & Benefits

Reduce risk

Know what users are doing inside your network at all times. Compare user activity against security and business policies to minimize security risks and legal liability. Network User Behavior Analysis complements access control solutions by verifying that users are not bypassing access controls, and helps monitor post-connect user behavior.

Increase efficiency and lower costs

Automate labor-intensive discovery and analysis of what users are actually doing to save time and money. With more accurate and tamperproof information from Network User Behavior Analysis, you can identify and respond to threats more quickly and with greater confidence. Since it provides an intuitive, complete view of who is doing what and where across your network, Network User Behavior Analysis is proven to reduce the cost, effort, and risk associated with network planning and changes.

Enhance user-identity capabilities

Get detailed information about the users who access business-critical applications. Dynamic integration with user directories provides each user’s name, role, and policy context. Any changes made in the directory automatically filter down to Network User Behavior Analysis Monitors.

Simplify compliance and auditing

Make audit preparation faster and easier with ongoing monitoring to ensure compliance with PCI DSS requirements, as well as FISMA, SOX, HIPAA, and GLBA regulations.

Deploy cost-effective, scalable monitoring

Enable out-of-band monitoring with no network reconfiguration. Network User Behavior Analysis Monitor utilizes packet capture (pcap) and network flow data, requires no agents, no application integration, and no recoding. For identity-based monitoring, Network User Behavior Analysis builds on the identity and role information in your existing directories.

Leverage your existing infrastructure

Integrate Network User Behavior Analysis quickly and easily with Active Directory and LDAP-based directories, network routers and switches, non-Microsoft Windows identity clients like Centrify, and flow-based data from Cisco and Juniper.

System Requirements

These are minimum system requirements only. Actual requirements will vary depending on your environment. Technical information provided by Intel. Specifications may change at any time and without prior notice.

McAfee Network User Behavior Analysis Monitor Appliance

  • Technical specifications
    • 1 Intel Xeon 5130, 2 GHz, 1,333 MHz, 4-MB cache, dual-core CPU (for Monitor SE, Flow Monitor SE, and Flow Monitor: 1 Xeon 5150, 2.66-GHz CPU)
    • Two 250 GB, 32-MB cache, 7.5K RPM SATA II, 3.5" hard drives
    • 4 GB RAM
  • Power & BTU specifications
    • Max. surge amps = 9.5
    • Max. running amps = 8.5
    • Avg. running amps = 6.25
    • Watts = 750
    • BTU/hr. = 2,550
  • Dimensions
    • Rack-mountable 1U device
    • 17"W x 28 1/2"D x 1 3/4"H
  • Weight
    • 30 lbs.
  • Temperature
    • Operating temperature: 50°–90° F / 10°–35° C (maximum change rate not to exceed 10° C per hour)
    • Non-operating temperature: -40°–70° C
    • Non-operating humidity: 90%, non-condensing at 28° C
  • Compliance
    • UL60950 – CSA 60950 (USA/Canada)
    • EN60950 (Europe)
    • IE60950 (International)
    • CE – Low-voltage Directive 73/23/EEE (Europe)
  • Certification
    • Common Criteria EAL 3 Certified
    • U.S. Department of Defense accreditations for operating in SIPRNet, NIPRNet, and JWICS

McAfee Network User Behavior Analysis Control Center Appliance

  • Technical specifications
    • 1 Intel Xeon 5150, 2.66 GHz, 1,333 MHz, 4-MB cache, dual-core CPU
    • Two 150 GB, 16-MB cache, 10K RPM SATA hard drives
    • 4-GB RAM
  • Power & BTU specifications
    • Max. surge amps = 9.5
    • Max. running amps = 8.5
    • Avg. running amps = 6.25
    • Watts = 750
    • BTU/hr. = 2,550
  • Dimensions
    • Rack-mountable 1U device
    • Dimensions: 17"W x 28 1/2"D x 1 3/4"H
  • Weight
    • 30 lbs.
  • Temperature
    • Operating temperature: 50°–90° F / 10°–35° C (maximum change rate not to exceed 10° C per hour)
    • Non-operating temperature: -40°–70° C
    • Non-operating humidity: 90%, non-condensing at 28° C
  • Compliance
    • UL60950 – CSA 60950 (USA/Canada)
    • EN60950 (Europe)
    • IE60950 (International)
    • CE – Low-voltage Directive 73/23/EEE (Europe)
  • Certification
    • Common Criteria EAL 3 Certified
    • U.S. Department of Defense accreditations for operating in SIPRNet, NIPRNet, and JWICS

Customer Stories

Cardnet

Cardnet eliminates malware infections with comprehensive network, email, and endpoint security from McAfee.

Highlights
  • Total absence of known infections of any kind
  • Protected the entire IT infrastructure
  • Maintained IT security with a staff of three, versus 20 or more if the McAfee suite was not in place

News / Events

News

No results found

Events

No results found

On Demand

No results found

Resources

Data Sheets

McAfee Network User Behavior Analysis

For a technical summary on the McAfee product listed above, please view the product data sheet.

McAfee Network User Behavior Analysis Studio

For a technical summary on the McAfee product listed above, please view the product data sheet.

Solution Briefs

White Papers

Community

Forums

No results found

Blogs

  • Lego Loss Prevention
    Tyler Carter - May 23, 2012
    I read a somewhat peculiar but interesting article yesterday about a creative way to steal Legos by bypassing traditional security systems. Here at McAfee, we’re always thinking about ways to better protect your data and critical assets, and this story reminded me of another (legal) Lego® project: a Lego representation of our Security Connected Ecosystem. Read more...
  • McAfee Webinar 5/22: Strategic Directions for Network Security
    Jonelle Hester - May 21, 2012
    As networks grow more complex, the process of securing and managing endpoints, applications, and confidential information has become more challenging than ever before. Last year saw an onslaught of financially and politically motivated breaches, and while the sophistication and persistence of attacks is moving at warp speed, most organizations are still using outdated security techniques Read more...
  • Relentless Pursuit To Strengthening Partner Relevance
    Gavin Struthers - May 10, 2012
    As discussed during our Q2 global Town Hall on May 3, (on-demand replay) strengthening partner relevance underpins everything we are doing. From our leadership with Intel to transform the security market with innovative technology, like DeepDefender to our continuous commitment to drive channel partner profitability with the industry’s richest deal registration program, Enhanced Deal Registration. Read more...
  • McAfee Network Security Doubles Performance of Existing IPS Solutions
    Jonelle Hester - May 08, 2012
    In modern high-density server environments, high switching and routing capacities are an absolute necessity. But while consolidation, virtualization and cloud computing have been driving up network performance for years, very few security solutions have been built to meet these faster networks. This has led to tough decisions between security and performance, not to mention the Read more...
  • McAfee at Interop 2012
    Jonelle Hester - May 04, 2012
    This week, our McAfee team is gearing up to attend Interop 2012, May 8-10 in Las Vegas! If you’re at the show, stop by our booth #421 where VP of Network Security Greg Brown and myself will be performing product demos and presentations throughout each day on the McAfee Network Security Platform, Enterprise Security Manager Read more...