- Chat with McAfee Ready to make a purchase or have questions before you buy? Chat with a McAfee expert. Available Monday to Friday.
- Find a Reseller
- Contact Me
- Get Security Notifications Now
- Call: 00800 122 55624
Overview
McAfee Vulnerability Manager, with its McAfee Asset Manager feature, delivers unrivaled scalability and performance, actively or passively canvassing everything on your network. Now you can uncover devices hidden on your network as well as smartphones, tablets, and laptops that come and go between scheduled scans. What you haven’t been seeing or scanning will surprise you — and could be jeopardizing your compliance. Thousands of organizations rely on Vulnerability Manager to quickly find and prioritize vulnerabilities, with deployments ranging from a few hundred nodes to one continuously scanning more than four million IP addresses. If it has an IP address or is using your network, Vulnerability Manager can discover and assess it, automatically or on a schedule, revealing the compliance of all assets on your network.
Vulnerability Manager gives you:
Priority-based auditing and remediation — Combines vulnerability, severity, and asset criticality information to quickly identify, rank, and address violations and vulnerabilities on networked systems and devices.
Active and passive network protection — Combines active and passive network discovery and monitoring to reveal virtualized, mobile and hidden devices on your network.
Proof of “not vulnerable” — A major requirement of auditors is to prove that you’re not vulnerable to threats, which is a significant attribute of McAfee Vulnerability Manager.
New threat identification and correlation — Automatically ranks the risk potential of new threats by correlating events to your asset and vulnerability data.
Policy auditing and compliance assessments — Defines values of policy checks and determines whether your organization complies with major regulations. Through an easy-to-use wizard it gives you templates for SOX, FISMA, HIPAA, PCI, and more.
Flexible reporting — Categorizes data by asset or network, and uses powerful filters to select and organize results in your reports. You can even create reports while scans are running.
Broad and deep content coverage — Performs authenticated and unauthenticated checks, automatically updated 24/7 by McAfee Labs, the world’s top threat research center. This helps you delve deep into operating systems and network devices to find vulnerabilities and policy violations.
Features & Benefits
Drill deep into web applications
Conduct deep scans of web applications that allow you to know where to focus your coding efforts before hackers can exploit your business-critical data. The scans include required checks for PCI, as well as coverage of the 2010 OWASP Top 10 and CWE-25 categories.
Start scanning within minutes
Choose an all-in-one or custom install on your physical or virtual hardware or our hardened appliances; use existing LDAP, Active Directory, or McAfee ePolicy Orchestrator (ePO) asset management systems, or let the first scan discover your assets.
Pinpoint vulnerabilities and policy violations with the highest level of precision
Through the combination of active and passive monitoring, penetration testing, authenticated scanning, and non-credentialed scanning, McAfee Vulnerability Manager accurately scans everything on your network making comprehensive vulnerability management simpler than ever before.
Use comprehensive and customizable content for checks and reports
Save hours with SCAP support and predefined, up-to-date policy templates. Our extensive checks validate alignment to federal and regulatory requirements and write custom scripts and checks to test proprietary and legacy systems.
Meet demanding federal and industry requirements
Certify to EAL Common Criteria and validate to FIPS-140-2 encryption. McAfee Vulnerability Manager includes templates for the most popular compliance templates and standards.
Gain unmatched vulnerability coverage, scanning accuracy, and malware protection
Go beyond ports and configurations to inspect systems, databases, and applications on all networked assets — from smartphones to secure servers.
Increase flexibility and performance
Tailor your deployment, scans, reporting, and management consoles, regardless of whether you centralize or segregate your operations, with the speed required for even multimillion node networks.
Prove “not vulnerable” to threats
Generate conclusive evidence — such as expected and actual scan results, any systems not scanned, and any failed scans — to document that specific systems are “not vulnerable,” an increasingly common audit requirement.
Respond to threats via McAfee Global Threat Intelligence
Leverage millions of sensors around the world that direct hundreds of McAfee Labs researchers to the latest changes in the threat landscape, fueling real-time risk assessments and threat advisories.
System Requirements
Vulnerability Manager Software
Deploy Vulnerability Manager as software on your own hardware or in a virtualized environment. Software deployment has the following minimum requirements:
- Hardware
- CPU: x86 multi-core, 2 GHz or higher (quad-core recommended)
- RAM: 2 GB minimum (4 GB recommended)
- Disk space: 80 GB minimum (200 GB for database)
- Virtual host
- VMware Virtual Infrastructure 3, vSphere (ESX/ESXi)
- VMware Workstation
- Operating system
- Microsoft Windows 2003 Server (32-bit) with Service Pack 2 (SP2) or higher
- Database
- Microsoft SQL Server 2005 with SP2 or higher (any edition)
- All SQL hotfixes and patches
Vulnerability Manager MVM3100 Appliance
Choose this purpose-built, hardened appliance for even faster, more effortless deployment. It includes all necessary software and an enterprise-grade database. Hardware deployment has the following minimum requirements:
- Hardware
- 1U rack mount chassis
- Quad-core Xeon
- 4 GB RAM
- 2 x 500 GB RAID 1
- Redundant power supplies
- Lights-out management
- 4 GbE scanning ports (VLANs supported)
Demos / Tutorials / Videos
McAfee Risk & Compliance
Learn how McAfee Risk and Compliance products scan your entire network, providing complete visibility and ensuring proper protection.
Vulnerability Manager
Learn how McAfee Vulnerability Manager can continuously discover, evaluate, and monitor evolving risks from devices on your network.
Tutorials
Videos
Awards / Reviews
Gartner MarketScope for Vulnerability Assessment
"McAfee Vulnerability Manager provides agentless security configuration assessment, plus integration with the agent-based McAfee Policy Auditor, with coverage of DISA STIG, NSA, FDCC, and CIS controls. McAfee Vulnerability Manager has flexible asset management, remediation reporting, and workflow capabilities."
McAfee Vulnerability Manager Product Review
In an independent evaluation conducted by S3KUR3 Inc., McAfee Vulnerability Manager was assessed as "No other solution combines the flexibility, comprehensive scanning, and powerful remediation capabilities in a single package."
Vulnerability Manager Rated Best Buy by SC Magazine
The McAfee Vulnerability Manager is a powerful appliance-based tool that provides vulnerability assessment, penetration testing and web application scanning along with rogue device detection and plug-in capability to LDAP (Lightweight Directory Access Protocol) and Microsoft Active Directory for asset management.
McAfee, Inc. System Security and Vulnerability Management Products Verified as Citrix Ready
SANTA CLARA, Calif., August 17, 2009 - McAfee, Inc. (NYSE:MFE) today announced that McAfee VirusScan Enterprise, McAfee Anti-spyware Enterprise, McAfee ePolicy Orchestrator, and McAfee Vulnerability Manager have been verified as Citrix Ready™. The Citrix Ready program identifies trusted, third-party solutions that add the greatest value in the Citrix Delivery Center™ infrastructure. The above-mentioned McAfee products have completed a rigorous verification process to ensure compatibility with Citrix® XenApp™.
Customer Stories
Abtran
McAfee security risk management solutions help Abtran meet clients’ increasing security requirements.
Highlights
- Provided multiple layers of security risk management protection for Abtran’s clients
- Reduced IT hours spent supporting, administering, and monitoring endpoint security
- Cut time to produce weekly security reports from three or four hours to less than two minutes
- Migrated easily and seamlessly from existing anti-virus solutions
Alcatel-Lucent Shanghai Bell
Alcatel-Lucent Shanghai Bell uses McAfee Network Security Platform to secure 100 Mbps to 10 Gbps corporate networks against threats and attacks.
Highlights
- Increased identification and interception of up to 99% of the threats
- Improved the work efficiency and allowed the information security and network departments to cooperate with each other in monitoring security threats and risks
Arab National Bank
Arab National Bank uses McAfee ePolicy Orchestrator (ePO) software to manage endpoint protection across 5,500 endpoints.
Highlights
- Reduces manpower required to manage endpoint security from six people to two
- Accelerates deployment of data loss protection—70 percent faster than competitive solutions faster than competitive solutions
- Cuts administrative reporting from several days to minutes
- Saves $152,000 in reduced manual intervention, thanks to integration with third-party security solutions
Cardnet
Cardnet eliminates malware infections with comprehensive network, email, and endpoint security from McAfee.
Highlights
- Total absence of known infections of any kind
- Protected the entire IT infrastructure
- Maintained IT security with a staff of three, versus 20 or more if the McAfee suite was not in place
CEMEX
CEMEX relies on McAfee to find system vulnerabilities and prevent data loss.
Highlights
- Discovered and assessed systems vulnerabilities
- Provided in-depth visibility regarding network assets
- Reduced vulnerability false positives by 80%
- Saved IT hours each week thanks to easy-to-use reports and minimal false positives
- Prioritized threat response
Citrix Systems
Citrix reduces risk with McAfee’s integrated security risk management platform.
Highlights
- Deployed quickly and easily, saving $40,000 in deployment costs
- Reduced incident response rate by 40% and overall TCO of security risk management
- Dramatically eased security administration and accelerated patch deployment
- Reduced remediation time by 70%
Dongfeng Nissan Passenger Vehicle Co., Ltd.
With robust integration features built into ePO, users can handle data events and achieve stronger monitoring and control easily and quickly through the platform.
Highlights
- Protected intellectual property
DSM
DSM enlists McAfee to strengthen enterprise network security control and compliance.
Highlights
- Provided full visibility into network traffic and connected systems
- Simplified patch management
- Improved compliance with regulations and policies
- Increased efficiencies for significant cost savings
HCF
HCF gets comprehensive anti-malware protection and streamlined security management with McAfee.
Highlights
- Smooth implementation
- Easy identification of vulnerable areas
- Meaningful reports for IT administrators who are only advised about attacks that are relevant to the environment
- Enabled automatic enforcement of security policies; ensuring network integrity
- Automation of patch management freed up IT staff to focus on strategic work
Idaho State Tax Commission
Idaho State Tax Commission chooses McAfee to embed security in a new network infrastructure.
Highlights
- Identified vulnerabilities and blocked threats
- Delivered reliable endpoint protection
- Enabled compliance with National Institute of Standards and Technology (NIST) security guidelines
- Provided support for the commission’s defense-in-depth security strategy
- Helped increase security awareness among network users
Integral Energy
Integral Energy proactively assesses and manages vulnerabilities with McAfee Vulnerability Manager.
Highlights
- Discovered and assessed system vulnerabilities quickly and accurately
- Enabled threat prioritization and proactive, informed decision making
- Provided in-depth visibility regarding network assets
- Facilitated compliance with ISO 27001 standard
Intelsat
Intelsat trusts McAfee to protect user and network devices globally.
Highlights
- Protected a diverse environment from internal and external threats, including the inherent risks of a fluctuating population of 250 to 500 contractors
- Managed the entire server system with 1.5 full-time employees (FTEs)
- Reduced solution cost by 75% over a la carte purchases from separate vendors
- Standardized a security environment that previously required five vendors
- Complied with regulations, including SOX, HIPAA, and Department of Defense (DoD)
Volvo Group
Volvo Group uses McAfee for for worldwide vulnerability management.
Highlights
- Delivered vulnerability management to a global network that spans over 180 countries
- Scans more than 100,000 nodes
- Protected 14 large data centers and 5,500 servers
- Combined vulnerability, asset, and countermeasure information
- Provided agentless policy compliance auditing
- Enabled Volvo to write custom scans and maintain data securely within the organization
Xinjiang Mobile
Xinjiang Mobile's comprehensive assessment of data protection products in the market lead them to choose and deploy McAfee’s solution.
Highlights
- Keeps data in Xinjiang Mobile’s core network safe and free from risks of financial loss, brand damage, lost customers, competitive disadvantage and other risk factors
- Tightens management and control of removable media and ensures security of corporate data
News / Events
News
- McAfee Delivers Unified Rapid-Response Security Management
February 12, 2013Topics : Security Management, SIEM
- McAfee Closes Industry Security Gap with Intelligent and Integrated Real-Time Asset Discovery
October 23, 2012Topics : Risk & Compliance, Security Management, SIEM
- McAfee Unveils the First Situational and Risk Aware SIEM
April 24, 2012Topics : Risk & Compliance, Security Management, SIEM
- McAfee Named Finalist in 11 SC Magazine 2012 Awards Categories
November 17, 2011Topics : Mobile Security
- McAfee Delivers Comprehensive Database Security Solution
March 23, 2011Topics : Risk & Compliance, Database Security
- Sentrigo Launches Comprehensive Enterprise-Class Vulnerability Assessment Solution for Databases
September 13, 2010Topics : Database Security
- McAfee Unveils Unparalleled Risk Management Solution
July 19, 2010Topics : Endpoint Protection, Risk & Compliance, Database Security
- McAfee, Inc. Advances Agent-Less Malware Detection Capability
February 24, 2010Topics : Risk & Compliance
Events
No results foundOn Demand
No results foundResources
McAfee Vulnerability Manager
For a technical summary on the McAfee product listed above, please view the product data sheet.
Reports
Solution Briefs
Technology Blueprints
White Papers
Community
Forums
McAfee Communities : All Content - Vulnerability Manager (Foundstone)
- report-csv-2013-06-18_23-32-59.zip
12 hours ago - Transform encountered error: XSL transformation failed msxml6.dll 800C0006
12 hours ago - report-csv-2013-06-18_23-32-59.csv
1 day ago - Vulnerability Group in the CSV
1 day ago - 1 Post - Windows 2008 Web Server identified as Windows 7
1 day ago
Blogs
- NCCDC 2013 – Red Team Recap
Jim Walter - May 07, 2013
This past April (4/19 to 4/21) I had the great pleasure and experience of joining the Red Team at 9th NCCDC competition. It was actually my 2nd year on the Red Team and 4th year to attend in total (I judged in 2010 and 2011). McAfee is actually a perpetual Read more... - RDP+RCE=Bad News (MS12-020)
Jim Walter - March 14, 2012
See March 15 and 16 updates at the end of this blog. —————————————————- The March Security Bulletin release from Microsoft was relatively light in volume. Out of the six bulletins released, only one was rated as Critical. And for good reason. MS12-020 includes CVE-2012-0002. This flaw is specific to the Remote Desktop Protocol (RDP) present on Read more... - An Update on DNSChanger and Rogue DNS Servers
Jim Walter - March 06, 2012
In late 2011, the FBI released documents and data focusing on “Operation Ghost Click.” This malicious operation, leveraging a variety of DNSChanger-type malware, was defined by the FBI as an “international cyber ring that infected millions of computers.” Associated malware samples and events can be traced back several years, and multiple platforms were targeted. To this day many remain Read more... - McAfee Q4 Threats Report Shows Malware Surpassed 75 Million Samples in 2011
David Marcus - February 21, 2012
Today we released our Fourth Quarter 2011 Threat Report, revealing that malware surpassed the our estimate of 75 million unique malware samples last year. Although the release of new malware slowed a bit in Q4, mobile malware continued to increase and recorded its busiest year to date. Malware The overall growth of PC-based malware actually Read more... - Cultural Security: Promoting Security Policies Using Organizational Culture
Steven Fox - September 06, 2011
Most of us refer to security policies in much the same way as we refer to our car manuals – when something unexpected happens. We know these documents have useful information. However, their utility is tied to situations where answers do not present themselves readily. According to Chris Noel, SVP of Product Management at ANXeBusiness, Read more...