McAfee Firewall Enterprise

Consolidate security, leverage high-assurance features

Put the network firewall in charge of security again with integrated comprehensive network gateway protection technology, including:

• Scalable policy enforcement (includes granular user and application controls)
• IP reputation
• Geo-location
• Encrypted traffic inspection (SSH/SSL)
• Antimalware
• URL/web filtering
• Antivirus
• Network intrusion prevention

Restore policy compliance in the network

Establish control over network applications and ensure alignment with compliance requirements. Allow administrators to quickly and efficiently apply application and user-based policies written in business terms (e.g., a marketing manager can access Facebook apps, but a financial controller cannot). Also, gain visibility into rules that might impact existing rules, avoiding conflicts and duplication.

Use AppPrism for application controls

Discover, control, visualize, and protect thousands of network applications. With AppPrism, you can gain individual application function control within the application. You can use AppPrism at the group level, or at a very granular per user per application level.

Integrate with existing identity infrastructure

Align your firewall security rules directly with organizational policy statements. Integration with existing network identity infrastructure enables simple deployment while aligning network security with the organization system of record. With McAfee’s Network Integrity Agent, the firewall not only shows you who initiates a session (even within VDI environments), but identifies the host application they actually used to initiate the session. This provides increased visibility into potential anomalies and threats within your network.

Leverage millions of sensors worldwide

Harness the power of 100 million sensors worldwide, providing real-time threat feeds to deliver predictive and pro-active security protection. Greatly reduce your time to protection with automated threat feeds that are delivered without taking the network firewall offline.

Identify firewall rule optimizations

Simplify the firewall’s policy in real time. Eliminate the hours spent looking for overlapping, conflicting, or inactive rules. The intuitive interface immediately identifies firewall rule optimizations, as you modify or construct rules. This high-assurance solution also delivers mature rule migration tools to help migrate from existing and legacy firewalls to McAfee Firewall Enterprise.

Optimize rules management

Centrally manage from a handful up to thousands of firewalls regardless of software version, virtual or physical firewalls, or running different platforms including Crossbeam or CloudShield. You can also generate reports, create rules, and selectively apply antivirus, IPS signatures, URL filtering, and more from a single screen. In addition, you can correlate firewall rules to users and applications to ease planning and network troubleshooting. Integration with McAfee ePolicy Orchestrator (McAfee ePO) software provides a holistic view of firewall health information and an understanding of desktop and server security posture. Integration with McAfee’s SIEM solutions provides customizable views and reports for all of the firewalls within an organization.

Provide security throughout the network

Deploy robust, flexible, and scalable security across your network, precisely where it’s needed with McAfee’s diverse set of powerful platforms. McAfee’s custom-built network appliances and availability to run on Crossbeam’s X-Series platforms address all performance and port density requirements, providing up to 58 Gbps of inspected traffic throughput. Deploy network security with confidence in untrusted environments by running McAfee Firewall Enterprise on the CloudShield CS-4000 trusted cyber platform. Multi-firewall appliances can consolidate up to 32 traditional standalone firewalls into a single, easy-to-manage, and cost-effective appliance. Our firewall virtual appliances secure intra-VM traffic among hosted machines within VMware ESX servers.

1. All specification and performance results are based on the S-series of appliances.
2. V8 performance data represents the maximum capabilities of the systems as measured under optimal testing conditions. Deployment and policy considerations may impact performance results.
3. Please contact your McAfee representative to determine proper sizing for your needs.
4. Maximum of 2 network modules supported (of any type), maximum of one 10 Gb network module supported
(with a maximum of 4 transceivers populated).