McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
Business Home → Products & Solutions → Data Protection
McAfee DLP Monitor

McAfee DLP Monitor

Stay ahead of risk with real-time monitoring of all your sensitive data

“With McAfee DLP, we can tell right away if someone in the company is doing something inappropriate with our data, and then act promptly to remedy the situation.”

Jim Fallon
Security Manager, Airlines Reporting Corporation
Read Full Story
Next Steps:

Overview

McAfee DLP Monitor allows you to gather, track, and report on the data in motion across your entire network, over time. Building a wealth of information about data usage patterns supports better decision making and provides greater insight. By detecting more than 300 content types traversing any port or protocol, Network DLP Monitor easily uncovers unknown threats to your data so you can quickly take action to protect it.

Examine network traffic — DLP Monitor’s industry-leading data scanning and analysis examines network traffic at a deeper level than any other solution on the market.

Quickly identify data — Real-time discovery quickly details how data is being used, who is using it, and where it’s going, providing you with information you can act on. DLP Monitor stores all analysis and classification results in a secure, easily searchable database, so you can assess risk, ensure compliance, and protect sensitive data.

Features & Benefits

Identify and address risks instantly

Find and analyze all sensitive information traveling across the network, and then easily create rules to prevent future risks.

Close gaps in data protection

Filter and control sensitive information, monitor file-share access, and index, query, and analyze all content. You don’t need to know the location of data and what format it is in — McAfee DLP Monitor does all the hard work for you.

Create and fine-tune effective rules

Avoid lengthy cycles of trial and error when building rules. DLP Monitor compiles a wealth of knowledge about how your information is used on your network so you can test policies, identify trends, and effectively protect your sensitive data.

Take control of data

View comprehensive reports about information, including who sent it, where it went, and how it was sent.

Simplify remediation

Streamline remediation by alerting senders, recipients, content owners, and system administrators with configurable notification messages.

Guarantee broad content support

Ensure support for over 300 content types, including Microsoft Office documents, multimedia files, source code, design files, encrypted files, and archives.

Perform detailed forensics

Gather a comprehensive picture of all the data handling activities performed by systems and users — an invaluable online record of data use that is critical to explore the chain of custody for any given data item.

Obtain built-in policies to meet compliance

Get built-in policies and rules for regulatory requirements, including PCI, GLBA, HIPAA, SOX, personally identifiable information, patient health information, SSN, CCN, stripe data, financial information, and more. Policies can also manage intellectual property assets, including source code, internal memos, product documents, patent applications, business strategy documents, and pricing information.

System Requirements

McAfee DLP Manager, McAfee DLP Monitor, McAfee DLP Discover, and McAfee DLP Prevent are now supported on the McAfee DLP 4400 appliance. The DLP 4400 appliance is an Intel-based platform with dual six core CPUs, 24 GB of RAM and 8 TB of storage in a 2U form factor. DLP hardware appliance solutions are self-contained devices. There are no minimum software or hardware system requirements or additional database installations required.

With the release of McAfee Data Loss Prevention (DLP) 9.2, McAfee DLP Manager, McAfee DLP Monitor, McAfee DLP Discover, and McAfee DLP Prevent are also available as virtual appliances. McAfee DLP virtual appliances run on VMware ESX or VMware ESXi 4.1 servers.

McAfee DLP 4400 Appliance

  • System
    • CPU: 2x Intel X5660, 12M Cache, 2.8 GHz (6 cores)
    • Memory: 24 GB P1333 DDR3
    • Hard Drives: 12 x 1 TB 7,200 rpm 3.5" SATA drives (8 TB usable storage)
    • Network Interfaces: Intel Dual Copper 1 Gb Ethernet I/O Module
    • RAID Controller: Intel RS2MB044
  • Power
    • 2 x 760W hot-swap Power Supply Modules
  • Dimensions
    • 17.57"W x 30.79"D x 3.43"H
    • Form factor: 2RU
  • Weight
    • 67 lbs.
  • Temperature
    • Operating temperature: 10°–35° C/50°–95° F
    • Humidity range: 8%–90%, non-condensing
  • Compliance
    • NRTL Certification (US/Canada)CB Certification (International)
    • CE Declaration of Conformity (CENELEC Europe)
    • FCC/ICES-003 Class A Attestation (USA/Canada)
    • USA-UL
    • VCCI Certification (Japan)
    • C-Tick Declaration of Conformity (Australia)
    • MED Declaration of Conformity (New Zealand)
    • BSMI Certification (Taiwan)
    • GOST R Certification / Certification (Russia)
    • CC Certification (Korea)
    • IRAM Certification (Argentina)
    • Ecology Declaration (International)
    • China RoHS Environmental Friendly Use Period
    • Packaging & Product Recycling Marks
    • SABS (South Africa)
    • NOM/NYCE (Mexico)
    • CCC Certification (China)
    • CC EAL 2+
    • FIPS-compliant encryption algorithms
    • Security Technical Implementations Guide (STIG)

Virtual Appliance Minimum Hardware Requirements

  • System
    • CPU: Intel Quad Core
    • Memory: 8 GB RAM
    • Hard Drive(s):
      • Drive 1: 128 GB for VM software
      • Drive 2: 640 GB for DLP virtual image
    • Network Ports:
      • 2 ports for DLP Monitor application
      • 1 port for DLP Prevent, DLP Manager, or DLP Discover applications
    • BIOS: Enable VT thread

System throughput: Up to 200 Mbps of full content analysis, indexing, and storage throughput per Network DLP Monitor Appliance is available. For networks with higher throughput requirements, you can use multiple devices in a load-balanced configuration.

Network integration: DLP Monitor integrates passively into the network using either a Switched Port Analyzer (SPAN) port or a physically inline network tap (optional).

Protocols supported: DLP Monitor supports all transmissions over any unencrypted protocol or port utilizing TCP as a transport protocol.

Legacy System Requirements

The Network DLP 1650 and Network DLP 3650 appliances have been discontinued. In accordance with McAfee’s End of Life policy, they are being supported until October 2016.

McAfee Network DLP 1650 Appliance

  • System
    • Memory: 16 GB
    • Fans: 5 cooling fans
    • Datastore capacity: 500 GB
    • Drive bays: 4
    • Disk capacity: 500 GB
    • Disk technology: SATA2
    • Optional expansion cards: External storage interconnection card
    • Network interfaces: Two 10/100/1000 copper network interface
    • RAID level: RAID-1
  • Power
    • Redundant hot-swappable 650-W AC-DC power supply, 100- to 240-V AC, 50–60 hertz
  • Dimensions
    • 17 1/4"W x 27 3/4"D x 1 3/4"H
    • Form factor: 1RU
  • Weight
    • 39 lbs.
  • Temperature
    • Operating temperature: 10°–35° C/50°–95° F
    • Humidity range: 8%–90%, non-condensing
  • Compliance
    • USA-UL
    • Canada-CUL
    • Germany-TÜV
    • EN 60950
    • IEC 60950
    • CB report
    • CCC certification

McAfee Network DLP 3650 Appliance

  • System
    • Memory: 16 GB
    • Fans: 5 cooling fans/redundant rear exhaust fans
    • Datastore capacity: 6 TB
    • Drive bays: 16
    • Disk capacity: 500 GB
    • Disk technology: SATA2
    • Optional expansion cards: External storage interconnection card
    • Network interfaces: Two 10/100/1000 copper network interface
    • RAID levels: RAID-1 and RAID-5
  • Power
    • Redundant hot-swappable 800-W AC-DC power supply, 100- to 240-V AC, 50–60 hertz
  • Dimensions
    • 17 1/4"W x 25 1/2"D x 5 1/4"H
    • Form factor: 3RU
  • Weight
    • 72 lbs.
  • Temperature
    • Operating temperature: 10°–35° C/50°–95° F
    • Humidity Range: 8%-90%, non-condensing
  • Compliance
    • USA-UL
    • Canada-CUL
    • Germany-TÜV
    • EN 60950
    • IEC 60950
    • CB report
    • CCC certification

Resources

Data Sheets

McAfee DLP Monitor

For a technical summary on the McAfee product listed above, please view the product data sheet.

Community

Blogs

  • Getting Value from Your DLP Investment
    Nikfar Khaleeli - February 09, 2012
    People can sometimes feel overwhelmed when they think about deploying data loss prevention (DLP) at their organization. Some common concerns I hear from prospects are: First I want to classify my data.  How can I do that? DLP has many components.  Where do I start? I have lots of data – some sensitive, some not. Read more...
  • Using DLP to Categorize Your Data and Reduce Risk
    Nikfar Khaleeli - January 25, 2012
    Data classification is an important – and very challenging – problem. It is all about tagging your data so that it can be found quickly and efficiently.  It is part of the Information Lifecycle Management process and enables organizations answer the following questions. What data types are available? Where are certain data located? What access Read more...
  • Best Practices for Protecting Images, Media and High Value Assets
    Nikfar Khaleeli - January 06, 2012
    Current DLP solutions rely on text pattern recognition to detect sensitive data and prevent data loss. But how can that protect images, digital media and other high value assets? If DLP could protect digital media, the 2009 leak of X-Men Origins: Wolverine would not have happened. Adding in a recognizable pattern or watermark is one Read more...
  • DLP For SAP: Protecting ERP Data Across The Organization
    Nikfar Khaleeli - November 16, 2011
    Many global organizations operate in highly competitive markets, including countries known to aggressively target intellectual property. A significant amount of sensitive information, including intellectual property (IP) resides in enterprise resource planning (ERP) systems such as SAP and Oracle. Traditionally, the security around this information has been limited to the capabilities of the ERP system through Read more...
  • 9th Circuit Ruling To Open Lawsuit Floodgates?
    John Dasher - March 02, 2011
    The 9th Circuit U.S. Court of Appeals held recently, in Krottner v. Starbucks Corporation, that increased risk of future misuse of personal data following the theft of a laptop containing the unencrypted personal data of a group of current and former Starbucks employees amounted to an injury sufficient to confer standing to sue in federal court. Note Read more...
View All
United States - English