McAfee Global Threat Intelligence Proxy (McAfee GTI Proxy)

McAfee GTI Proxy Overview:

The McAfee Global Threat Intelligence Proxy (McAfee GTI™ Proxy) enables McAfee VirusScan® Enterprise nodes to perform McAfee GTI file reputation (formerly McAfee Artemis™) queries from within the enterprise network without requiring direct access to the public McAfee cloud from all McAfee VirusScan Enterprise (version 8.7 or

Description:

McAfee Global Threat Intelligence Proxy (McAfee GTI Proxy) enables McAfee VirusScan Enterprise nodes to perform McAfee GTI file reputation (formerly known as Artemis) queries from within the enterprise network without requiring direct access to the public McAfee cloud from all McAfee VirusScan Enterprise (version 8.7 or later) endpoint systems. With McAfee GTI Proxy, organizations ensure that they have up-to-date threat protection and robust virus detection capabilities, including a strong defense against advanced persistent threats and botnets, even if Internet access is limited.

Consolidated cloud communications — Driven by compliance or other factors, organizations often have unique requirements for allowing applications to access resources on the Internet. For organizations operating limited Internet access environments, McAfee GTI Proxy consolidates communications between McAfee VirusScan Enterprise clients that have McAfee GTI file reputation queries activated and the McAfee cloud via a set of auditable proxy servers.

Streamlined deployment and management — McAfee GTI Proxy is delivered as a VMware virtual appliance and managed by the McAfee ePolicy Orchestrator (ePO) platform. Optimized for efficiency, McAfee GTI Proxy requires little additional network overhead.

Real-time threat protection — Leveraging McAfee GTI via the cloud to resolve real-time file reputation queries, McAfee GTI Proxy identifies suspicious files that may contain malware.

Benefits and Features:

• Stop malware in real time
  Close the protection gap with McAfee Global Threat Intelligence (GTI). McAfee GTI offers comprehensive, real-time protection against both known and emerging threats and McAfee GTI Proxy enables GTI support for VirusScan Enterprise clients. McAfee GTI, a cloud-based service using reputation-based threat protection in addition to other techniques, correlates real-world data collected from millions of sensors globally and delivers automated intelligence to VirusScan Enterprise via the GTI Proxy.
  
  
• Implement a highly scalable, cost-effective solution
  Support up to 100,000 PCs per virtual appliance, reducing management costs.
  
  
• Ensure secure data transmission
  Communications between GTI Proxy and the McAfee cloud are handled via UDP wrapped in SSL (which is DTLS on port 443).

Solutions:

Enabling McAfee Global Threat Intelligence™ in the enterprise

Consolidated Cloud Communications
Driven by compliance or other factors, organizations often have unique needs and requirements for allowing applications to access resources on the Internet. For organizations operating limited Internet-access environments, McAfee GTI Proxy allows the consolidation of communications between McAfee VirusScan Enterprise clients that have McAfee GTI file reputation queries activated and the McAfee cloud via a set of auditable proxy servers. McAfee GTI Proxy is delivered as a VMware virtual appliance and managed by the McAfee ePolicy Orchestrator® (McAfee ePO™) platform. Leveraging McAfee Global Threat Intelligence via the cloud to resolve real-time file reputation queries, McAfee GTI Proxy is optimized for efficiency, introduces little additional network overhead, and supports up to 100,000 clients.

Easy Auditing
In addition to consolidating communications, McAfee GTI Proxy enables the creation of reports and dashboards on the McAfee ePO management platform. This allows easy access to information about the overall health of cloud communications and internal McAfee GTI Proxy appliance activity. Capabilities include the ability to track onsite node deployment, cloud latency, and overall

Integrates Into Existing Environments
McAfee GTI Proxy is an easy add-on to McAfee VirusScan Enterprise. Delivered as a virtual appliance, it requires no new hardware and minimal infrastructure changes. It is available at no additional cost as part of the existing license for McAfee VirusScan Enterprise and product suites that include McAfee VirusScan Enterprise. Deployment of McAfee GTI Proxy requires a simple software update to install an extension for McAfee ePO software and a McAfee agent plug-in. These client deployments introduce a negligible increase in footprint and result in no additional processes

Flexible and Scalable
McAfee GTI Proxy is highly scalable, designed to accommodate client growth needs as well as available deployment scenarios, and is built to fit unique customer needs. A single McAfee GTI Proxy virtual appliance can support up to 100,000 client systems. Security professionals can tier McAfee GTI Proxy servers and configure client communications in a defined priority order for large or complex environments. Deployments can seamlessly support external network computing scenarios where employees may not be on a company-controlled network 100 percent of the time by automatically reverting queries to the

With McAfee GTI Proxy, organizations of all sizes and types can take advantage of McAfee Global Threat Intelligence, the industry's most comprehensive electronic threat intelligence capability.

System Requirements:

These are minimum system requirements. Actual requirements will vary depending on the nature of your environment.

McAfee Components

• McAfee ePolicy Orchestrator (ePO), version 4.5
• McAfee VirusScan Enterprise, version 8.7 or 8.8
• McAfee Global Threat Intelligence file reputation (formerly known as Artemis) technology

VM Infrastructure

• VMware Workstation 6
• VMware ESXi 4.0
• VMware Server 1.x or 2.x

Server

• Distributed as VMware appliance image
• 64-bit guest operating system running CentOS
• Disk space: Minimum of 35 GB available
• Minimum of 2 GB RAM available
• 64-bit CPU

Documentation:

Download the McAfee Global Threat Intelligence Proxy Datasheet (PDF).