McAfee Firewall Enterprise 4150

McAfee Firewall Enterprise Overview:

Firewall management costs are exploding while archaic protection technologies fail to stop an onslaught of new threats. McAfee Firewall Enterprise appliances provide powerful centralized management and reporting tools to ease planning, troubleshooting, and configuration, while global reputation technology reduces up to 70 percent of unwanted traffic and blocks attacks before they occur.

Description:

Protecting networks against the evolving threat environment has never been more challenging. Networks and connectivity keep growing. And new threats combine into blended attacks that simultaneously exploit a variety of vulnerabilities. Worse yet, these attacks are coming from both outside and inside the network, and even through encrypted protocols.

McAfee Firewall Enterprise offers unprecedented levels of threat protection. Advanced capabilities, such as reputation-based global intelligence, configurable application-level protection, encrypted traffic inspection, intrusion prevention, anti-virus, and content filtering, block attacks before they occur.

Yet even with all this functionality, Firewall Enterprise is still easy to administer, with centralized firewall management and reporting and user-friendly rule-creation capabilities. Three additional products simplify management and help you respond more quickly to the needs of your business:

McAfee Firewall Profiler, sold separately, takes a feed from McAfee Firewall Enterprise and instantly analyzes this information to provide visibility into how firewall rules interact with and impact the network. Profiler dramatically reduces the time needed to solve firewall-related network or application outages from hours to minutes, turning substantial manual efforts into a few simple clicks.

McAfee Firewall Reporter, included, turns audit streams into actionable information. This award-winning security event management (SEM) tool delivers central monitoring plus correlated alerting and reporting to help meet all major regulatory requirements, including PCI DSS, GLBA, HIPAA, SOX, and FISMA.

McAfee Firewall Enterprise Control Center, sold separately, offers centralized firewall policy management for multiple Firewall Enterprise appliances.

Firewall Enterprise is ideal for businesses of all sizes. We have models ranging from our entry-level model 410 to our multi-gigabit enterprise-class 5U model 4150. Delivery options include standard, multi-firewall, and rugged physical appliances, as well as virtual appliance offerings.

Benefits and Features:

 

Firewall Enterprise Solutions:

Today’s Firewall Challenges Mandate a New Paradigm of Protection

Firewalls are a company’s first line of defense against security threats and critical to every organization’s network protection strategy. But threats to the enterprise are becoming more dangerous and unpredictable every day, with new application-layer attacks, Web 2.0 vulnerabilities, and signature-evading malware. Security incidents are on the rise—due in large part to archaic firewall protection technologies that cannot defend against these new threat vectors. At the same time, firewall administrators struggle to manage and troubleshoot numerous legacy firewall policies as administration costs continue to rise.

Exploding cost of management
Managing multiple aging firewalls is a time- and resource-intensive task, to say the least. Uncoordinated changes to applications and networks cause outages that often take hours or even days to troubleshoot. Administrators lack visibility into user behavior and struggle to efficiently respond to changing business needs. This is to say nothing of more frequent mandates to demonstrate compliance with audit and regulatory requirements—another tedious task that is made all the more costly and laborious if you lack useful reporting tools.

To proactively defend against the ever-changing threat landscape, you need to be able to simply and confidently implement the firewall changes your business needs. In other words, you need a new firewall solution—McAfee® Firewall Enterprise (Sidewinder®).

Archaic protection technology failing against latest threats
The old technology of rules and signatures is no longer enough. New threats are combining into blended attacks that simultaneously exploit a variety of vulnerabilities. Worse yet, they’re coming from both outside and inside the network, and even through encrypted protocols. Keeping this threat environment at bay has never been more challenging, as networks and connectivity keep growing, and threats evolve at rapid-fire speed. Without visibility into emerging threats, administrators spend too much time and effort just trying to keep up.

McAfee Firewall Enterprise Overview

With McAfee Firewall Enterprise and its related products, administrators can immediately begin to put firewall rules in the proper business context and take advantage of centralized firewall management, reporting, and user-friendly rule creation capabilities. Additionally, Firewall Enterprise offers unprecedented levels of threat protection. Advanced capabilities such as reputation-based global threat intelligence, configurable application-level protection, encrypted traffic inspection, anti-virus, content filtering, and intrusion-prevention block attacks before they occur.

Streamline Firewall Management and Regulatory Compliance While Improving the Agility of Your Business

McAfee Firewall Profiler, a separate appliance in the Firewall Enterprise line up, specifically targets some of the most time-consuming tasks in current Firewall Administration—investigating and resolving firewall outages. By pinpointing in real-time how firewall rules correlate to business users and applications, Firewall Profiler enables administrators to see the impact of creating or changing a specific firewall ruleset. Hours and days of rule creation and troubleshooting work become a mere matter of clicks. As a result, operational costs decrease and firewall administrators can implement new applications faster and respond more quickly to business needs.

McAfee Firewall Enterprise Admin Console simplifies policy creation
Reliable security must also be easy to configure. Firewall Enterprise’s Admin Console is a user-friendly interface that lets your administrators create rules and selectively apply defenses such as application filters, IPS signatures, and URL filtering from a single screen. New software feature updates are delivered automatically via the Internet, reducing maintenance effort. Simply determine the schedule with a single mouse click. Additionally, Firewall Enterprise has an unequalled CERT advisory record. You are never interrupted by emergency security patches and your staff can stay focused on more strategic projects.

The Firewall Enterprise product line includes additional tools for simplifying management: McAfee Firewall Reporter and McAfee Firewall Enterprise Control Center (CommandCenter™).

McAfee Firewall Reporter
Included at no additional cost, Firewall Reporter turns audit streams into actionable information. This award-winning security event management (SEM) tool delivers central monitoring, and correlated alerting and reporting. Easily generate more than 800 graphical reports to depict network traffic and help meet all major regulatory requirements, including:

• Sarbanes-Oxley (SOX)
• Payment Card Industry (PCI) Security Standards Council
• Gramm-Leach-Bliley Act (GLBA)
• Health Insurance Portability and Accountability Act (HIPAA)
• Federal Information Security Management Act (FISMA)

McAfee Firewall Enterprise Control Center
Sold separately, Firewall Enterprise Control Center offers centralized firewall policy management for multiple Firewall Enterprise appliances. Maximize operational efficiency, simplify policy control, optimize rules, streamline software updates, and demonstrate regulatory compliance. You can even compare policy configurations on all of your Control Center-managed devices to ensure consistency across your network. Robust configuration management features let you centrally track, trace, and validate all policy changes. Furthermore, Control Center now integrates with McAfee ePolicy Orchestrator® (ePO™), providing ePO with visibility to firewall health data and reports.

Gain Real-Time Global Threat Visibility While Eliminating Unwanted Traffic

Firewall Enterprise virtually eliminates exposure to unknown attackers thanks in part to two exclusive technologies: McAfee TrustedSource™, the industry’s first global reputation system for Internet senders, and geo-location filtering, which provides geographic visibility and policy management based on the traffic’s country of origin.

Global Threat Intelligence
McAfee TrustedSource has set a new standard for proactive detection. Backed by Avert Labs, the most comprehensive threat research organization, this in-the-cloud service dissects traffic not against signatures but on the historical behavior of Internet-based hosts and devices. TrustedSource rejects connections with known bad senders, infected web pages, blended threats, and hosts turned into malware-distributing zombies, effectively blocking these attacks at your perimeter.

By blocking these attacks, TrustedSource also blocks over 70 percent of unwanted traffic at the network edge. This reduces traffic volume on downstream network servers, saving you bandwidth and processing time.

Geo-location
Firewall Enterprise’s geo-location capability further limits global threats by allowing traffic filtering based on country code. Many organizations waste bandwidth and system resources on traffic from countries and entire continents that they don’t even do business with—exposing themselves to unnecessary security risks in the process. Geo-location helps you connect only with the global traffic that’s directly related to your business.

View and Control Your Applications

As cybercriminals become more organized and persistent, network security administrators need to be ever vigilant in protecting mission-critical networks, applications, and data. Applications, in particular, are a primary target of hackers—at least 80 percent of new attacks focus on application vulnerabilities. Legacy firewalls, or those that employ only stateful or deep inspection techniques, fall short of protecting your enterprise.

Firewall Enterprise includes stateful and deep inspection as part of its arsenal, but as a true application-layer firewall, Firewall Enterprise empowers you to add more advanced protection where and when you need it—without compromising performance.

Application-level controls are available for many of the most commonly used protocols, such as:

• Email (SMTP)
• Web (HTTP and HTTPS)
• Multimedia (H.323)
• Oracle and MS-SQL
• Citrix
• Voice over IP/Session Initiation Protocol (VoIP/SIP)
• Secure Shell (SSH)
• File Transfer Protocol (FTP)

Meet PCI DSS requirements
The Payment Card Industry Data Security Standard (PCI DSS) now requires companies that handle credit cards to deploy an application firewall. Firewall Enterprise helps you meet these requirements and proactively protect your customer account data.

Eliminate the Blind Spot of Encrypted Applications

Most organizations today encrypt some volume of Internet traffic—whether for communication with business partners or customers, or for client-server system communications. While encryption provides valuable protection of data in transit, it can also present an opportunity for cybercriminals. Most legacy firewalls do not inspect encrypted traffic and therefore cannot screen against anti-malware or intrusion prevention signatures within such encrypted traffic. This offers hackers a wide-open tunnel to exploit your servers and applications.

Firewall Enterprise eliminates this vulnerability by decrypting, filtering, and controlling Secure Socket Layer (SSH), Secure FTP (SFTP), Secure Channel Protocol (SCP), and Secure Socket Layer (SSL)/HTTPS traffic. This eliminates surprise attacks on your web and application servers while still protecting the integrity and authenticity of encrypted messages.

 

* These services are purchased separately.

Firewall Enterprise Specifications:

Which Firewall Enterprise Appliance is right for you?