Content

Insider Threat Protection

Layered access, behavior, and content controls to detect and mitigate risks from malicious insiders

To protect your data and systems from damage or loss by privileged insiders, including business partners, combine best-in-class identity-based and content-based security tools with network protections from McAfee. McAfee helps you detect and end anomalous, risky, or malicious user behavior and discover and monitor sensitive data throughout your network. With real-time insight into who is doing what, and where and when, you can implement and enforce effective controls that guard your systems, infrastructure, and information assets from loss and misuse. To reduce risk further, you can enforce network policies to limit access to specific hosts, groups, or network segments. McAfee insider threat solutions help you drive down operational costs, gain process efficiency, and prove you have the controls in place for regulatory compliance.

Tab Navigation

Overview:

Key Benefits

  • Improved visibility into usage and compliance—Leverage nonstop monitoring and advanced auditing, logging, reporting, and forensics for visibility into usage and proof of compliance with regulations; gain audit readiness and audit confidence by verifying business and security policy in real time (PCI, FISMA, etc.)
  • Accelerated protection with lower implementation costs—Automate capture of all data and its historical context to shorten time spent developing and tuning security policies, reduce false positives, and ensure policies are mapped directly to the business and critical issues
  • Improved understanding of threats and risks—Gain critical insight into normal and anomalous user behavior and data traffic; better evaluate threats and risk, and fine-tune policies to reduce risky behavior
  • User education that improves compliance—Reduce accidental violations by notifying users when their activities violate policies or place intellectual property at risk; most companies see violation rates fall off quickly with simple alerts
  • Automatic enforcement of policies—Encrypt, quarantine, bounce, or block transmissions to avoid leakage of sensitive data and confidential records and files; insulate assets with fine-grained controls over network usage
  • Easy-to-install appliances—Avoid expensive consultants and long rollout times; our high-performance appliances are designed to plug into your network and integrate with your existing identity, network, and management infrastructure
  • Predefined rules simplify support for key data regulations—Start learning about your data usage fast with out-of-the-box rules that filter traffic for regulatory violations (PCI, HIPAA, etc.) and inappropriate content; easily customize rules as you learn
  • Reduced operational costs—Centralize policy definition and deployment and speed rollouts with our single-agent, single-console management infrastructure

Products:

McAfee Network Access Control—Control users and devices that access your network, monitor their post-admission behavior, and prevent infected systems from spreading threats; available as a standalone appliance or as a module in the Network Security Platform

McAfee Network DLP Discover (formerly Reconnex®)—Assess your data center and all other data sources across your network to uncover and classify your data and lay the groundwork for automated protection

McAfee Network DLP Monitor (formerly Reconnex)—Analyze all your network communications and uncover threats to your data

McAfee Network DLP Prevent (formerly Reconnex)—Block both inbound and outbound communications that violate your policies and put your data at risk

McAfee Network Security Platform—Select from our portfolio of high-throughput hardened appliances for up to 10 gigabit performance to secure every network-connected device from attacks crossing your network, as well as external threats

McAfee Network User Behavior Analysis (Securify)—Gain real-time visibility into who is doing what, and where, across the network through behavioral analysis, anomaly detection, and proactive correlation of network activity to actual user identities, groups, and roles, as well as security policies

Take the Next Step

Learn more about how our products can help you understand user behavior, improve compliance, and reduce the risk of sensitive data loss.