FEATURES

Instant Discovery and Control

Tracking down security gaps in your ever expanding hybrid data center does not have to be hard, thanks to Cloud Workload Discovery for hybrid cloud, a key feature of McAfee Server Security Suite Advanced. Cloud Workload Discovery for hybrid cloud, covering VMware, OpenStack, AWS, and Microsoft Azure, provides end-to-end visibility into all workloads and their underlying platforms. Insights into weak security controls, unsafe firewalls, and encryption settings, and indicators of compromise, such as suspicious traffic, lead to faster detection. McAfee® ePolicy Orchestrator® (McAfee ePO™) software or DevOps tools enable quick remediation. Cloud security can be challenging because there are a lot of different cloud workloads with unique risk profiles and security requirements. Cloud Workload Discovery’s policy-driven assessment makes it easy to compare exactly

Cloud security can be challenging because there are a lot of different cloud workloads with unique risk profiles and security requirements. Cloud Workload Discovery’s policy-driven assessment makes it easy to compare exactly what security controls these diverse workloads require, versus what they actually have, to ensure adequate protection and compliance. Once you have discovered security risks, you can move to complete protection with just a few clicks.

Cloud Workload Discovery’s integration with the McAfee ePO management console gives organizations effective control to help implement secure solutions across physical, virtual, and cloud environments. With this integration, security administrators can use a single management platform with simplified workflows to address threat alerts and enforce policies, reducing the time to identify and resolve security issues. McAfee Server Security Advanced assures that dynamic cloud environments that support DevOps don’t sacrifice security for agility.

Our security scales elastically with cloud workloads so that you’re always protected. With elastic provisioning in private clouds, offline scan servers can be automatically added to or removed from the resource pool as workloads are spun up or down. For AWS and Azure workloads, users can configure security at the template level so that it auto-scales with changing workloads.

Comprehensive Protection

McAfee Server Security Suite Advanced offers the most comprehensive protection for your servers, whether physical, virtual, or in the cloud. In addition, its protection against memory buffer overflow attacks on Windows 32- and 64-bit systems along with a unique combination of blacklisting, whitelisting, and change control is unmatched in the industry.

The suite includes:

 ● McAfee Application Control for Servers: A whitelisting solution that allows only authorized software to run on servers to protect against unknown malware and zero-day and advanced threats. This centrally managed whitelisting solution uses a dynamic trust model to eliminate labor-intensive list management.

 ● McAfee Change Control for Servers: Provides continuous detection of system-level changes across distributed and remote locations to help ensure compliance with laws and regulations, such as Sarbanes-Oxley and Payment Card Industry Data Security Standard (PCI DSS).

  ● McAfee Endpoint Security Threat Prevention: Part of a collaborative, extensible framework that protects Microsoft Windows and Linux servers against zero-day exploits and advanced attacks.

  ● McAfee Management for Optimized Virtual Environments AntiVirus (McAfee MOVE AntiVirus): An antimalware solution designed specifically for virtual environments. It is available as an agentless, tuned option for VMware NSX and VMware vCNS and as a multiplatform option that can be deployed for all major hypervisors, including Microsoft Hyper-V, VMware, KVM, and Xen.

 ● McAfee Host Intrusion Prevention for Servers: Safeguards businesses against complex security threats by monitoring the behavior of code on your server, analyzing events for suspicious activity.

● McAfee Endpoint Security Firewall: Monitors network and internet traffic and intercepts suspicious communications.

McAfee Server Security Suite Advanced can enhance global reputation intelligence from McAfee Global Threat Intelligence (McAfee GTI) with local data from McAfee Threat Intelligence Exchange, an additional module sold separately, to instantly identify and combat the ever increasing unique malware samples. Using McAfee Threat Intelligence Exchange, solutions in the suite coordinate with McAfee Advanced Threat Defense to dynamically analyze the behavior of unknown applications in a sandbox and automatically immunize all endpoints from newly detected malware. Intel Security partners with Rapid7 for vulnerability management. Rapid7’s Nexpose solution discovers and prioritizes vulnerabilities and confirms when exposures are fixed.

Minimal Performance Impact

Although security is top of mind for most companies, some are hesitant to move forward with server protection due to concerns over its impact on performance. McAfee Server Security Suite Advanced makes it possible to protect your physical and virtual servers without sacrificing performance even when scanning for malware. Unlike many anti-malware products, McAfee Endpoint Security and McAfee MOVE AntiVirus don’t make significant demands on computing resources. McAfee Endpoint Security provides fast scans and optimizes its use of CPU and memory while protecting better than other anti-malware products. McAfee MOVE AntiVirus offloads malware scanning from virtual machines for instant protection with low impact on memory and processing. Separate policies for on-access and on-demand scanning allow greater control of performance turning and security.

BENEFITS

● Unifies security management across endpoints, networks, data, and compliance solutions from Intel Security and third party solutions through McAfee ePO software.

● Provides deep visibility, risk assessment, and remediation through Cloud Workload Discovery for the hybrid cloud.

●Combines blacklisting and intrusion prevention with advanced whitelisting and change control to protect physical and virtual servers from malware. – Protects from unknown threats by preventing unwanted applications from running. – Continuously detects system-level changes across distributed and remote locations to help meet compliance requirements.

● Blocks zero-day, unknown threats in seconds using local reputation data combined with sandbox analytics.

● Delivers optimized physical and virtual security with minimal performance impact.