McAfee Host Intrusion Prevention for Server

McAfee Host Intrusion Prevention for Server Overview:

McAfee Host Intrusion Prevention for Server proactively secures against known and new zero-day attacks. It boosts security and lowers costs by reducing the frequency and urgency of patching. Host Intrusion Prevention integrates with the McAfee ePolicy Orchestrator (ePO) platform for centralized reporting and management that’s accurate, scalable, easy to use, and works with other McAfee and non-McAfee security products.

Description:

McAfee Host Intrusion Prevention helps you proactively protect servers from complex threats instigated by cybercrooks. Host Intrusion Prevention monitors and blocks unwanted activity and helps you maintain server uptime and protect corporate assets, like servers, applications, customer information, and databases. It uses multiple proven methods, including behavioral and signature analysis, a stateful firewall that sets security parameters based on how users connect to the network, and application control. Host Intrusion Prevention also offers specialized protection that addresses security requirements of web and database servers.

Automatic signature updates and zero-day protection give you advanced vulnerability-shielding capabilities, so that you patch systems less often and less urgently. Better protection against exploits targeting new vulnerabilities means your IT staff has more time for planning, testing, and deploying patches. You’ll also find it easier to comply with legal and industry regulations.

Standalone products have cumbersome, non-integrated management platforms, making it difficult to deploy the comprehensive protection you need against today's blended threats. Host Intrusion Prevention integrates with McAfee ePolicy Orchestrator® for centralized reporting and management that’s accurate, scalable, easy-to-use, and works with other McAfee and non-McAfee security products.

Comprehensive security — Host Intrusion Prevention for Server uses multiple proven methods, including behavioral and signature analysis, plus a dynamic stateful firewall buttressed with global reputation technology to block emerging attacks.

Advanced vulnerability-shielding capabilities — Better protection against exploits that target new vulnerabilities means your IT staff has more time for planning, testing, and deploying patches.

Customized server protection – Host Intrusion Prevention for Server helps maintain server uptime with specialized protection for web and database servers.

Enhanced security powered by McAfee Global Threat Intelligence — McAfee Global Threat Intelligence (GTI) is a comprehensive cloud-based threat intelligence service. Already integrated into McAfee security products, it works in real time, 24 hours a day, to protect customers against cyberthreats across all vectors — file, web, message, and network. McAfee GTI offers the broadest threat data, most robust data correlation, and most complete product integration in the industry. McAfee’s GTI network allows enabled products to evaluate threats on multiple vectors in real time, leading to faster identification of threats and higher capture rates. Host Intrusion Prevention for Server uses the McAfee GTI file reputation service and network connection reputation service to find suspicious files before they are identified as carrying malicious payloads, as well as domains/IP addresses that are infected or hosting malware attacks, and block those attacks.

Benefits and Features:

System Requirements:

These are minimum system requirements. Actual requirements will vary depending on the nature of your environment.

Operating System

Microsoft Windows (English, French, German, Spanish, Japanese, Korean, Traditional Chinese)

• Microsoft Windows Server 2008 (32-bit and 64-bit)
• Microsoft Windows Server 2003 Standard with Service Pack 2 (SP2) or higher (32-bit and 64-bit)
• Microsoft Windows Server 2003 R2 Standard (32-bit and 64-bit)
• Microsoft Windows Server 2003 Enterprise with SP2 or higher (32-bit and 64-bit)
• Microsoft Windows Server 2003 R2 Enterprise (32-bit and 64-bit)
• Microsoft Windows Server 2003 Web with SP1 or higher
• Microsoft Windows Server 2003 R2 Web
• Microsoft Windows 2000 Advanced Server with SP4 or higher
• Microsoft Windows 2000 Datacenter Server with SP4 or higher
• Microsoft Windows 2000 Professional with SP4 or higher
• Microsoft Windows 2000 Server with SP4 or higher

Red Hat Enterprise Linux 4.0 (32-bit only)
The following Red Hat Enterprise Linux 4 kernel modules are supported:

• 2.6.9-22.EL
• 2.6.9-22.EL-smp
• 2.6.9-34.EL
• 2.6.9-34.EL-smp
• 2.6.9-42.EL
• 2.6.9-42.EL-smp

Sun Solaris

• SPARC Solaris 8, (32-bit or 64-bit kernel)
• SPARC Solaris 9, (32-bit or 64-bit kernel)
• SPARC Solaris 10

SUSE Linux Enterprise

• 10, 11 (32-bit or 64-bit kernel)

Supported Web Server Platforms:

• IIS 4.0, 5.0, and 6.0 (Microsoft Windows)
• Apache 1.3.6 and later Web Server
• Apache 2.0.42 or later Web Server
• Sun ONE Web Server 6.0
• Sun Java Web Server 6.1

Supported Database Server Platforms:

• Microsoft SQL Server 2005 and 2008

Documentation:

Download the McAfee Host Intrusion Prevention Datasheet (PDF).