McAfee Network Data Loss Prevention (DLP) Discover

McAfee Network DLP Discover Overview:

Information that resides on laptops, on shared file servers, on portals, or in document-management systems may be putting organizations at risk. This is especially difficult because sensitive information isn’t always properly labeled. McAfee DLP Discover helps you protect your organization against data loss.

Description:

From source code to trade secrets to strategic business plans, IP and other information assets are critical to your brand, public reputation and competitive edge. Protecting data during transmission is critical, but securing sensitive data before it is inappropriately accessed or moved and understanding where it resides should be your first line of defense.

McAfee Network Data Loss Prevention Discover allows you to verify whether sensitive data may be at risk and to know where it has been distributed. It can even identify complex sensitive data, such as Intellectual Property (IP) assets that are harder to define than fixed data like credit card or Social Security numbers.

Determine What Information to Protect
To identify information and proliferation risks, McAfee Network DLP Discover can be configured to scan specific repositories and identify data for explicit protection. Additionally, all data crawled by McAfee Network DLP Discover is indexed and made accessible through an intuitive interface.

Define Policies for Protection
McAfee Network DLP Discover provides intuitive and unified policy creation, reporting, and management to give you more control over your information-protection strategy for data at rest.

Scan Your Network for Violations
After policies are defined, McAfee Network DLP Discover can be instructed to routinely scan network resources for policy violations. Flexible scheduling options are available to perform continuous, daily, weekly, or monthly scans. McAfee Network DLP Discover also automatically scans all accessible resources, including laptops, desktops, servers, document repositories, portals, and file-transfer locations, for policy violations.

Review and Remediate Violations
McAfee Network DLP Discover eliminates or minimizes proliferation of sensitive material through integrated incident workflow and case management. If McAfee Network DLP Discover finds content that violates protection policies, it generates incidents and sends notifications.

Capture and Analyze Stored Data
McAfee Network DLP Discover indexes all content found at rest in the network and provides you with the ability to query and mine this information to understand your sensitive data. McAfee Network DLP Discover lets you quickly understand your sensitive data, how it is used, who owns it, where it is stored, and to where it has proliferated.

Benefits and Features:

System Requirements:

Platform Specifications:

McAfee Network DLP Appliance 1650:

Form Factor: 1RU
Dimensions: (H x W x D) / Weight:1.7 x 17.2 x 27.75 in. 43 x 437 x 705 mm 39 lbs / 17.7 kg
Optional Expansion Cards: External storage interconnection card
Datastore Capacity: 500GB
Drive Bays: 4
Disk Capacity: 500GB
Disk Technology: SATA2
RAID: RAID-1
System Memory: 16GB
System Fans: 6 cooling fans
Operating Temperature:10-35 degrees (C)/ 50-95 degrees (F)
Humidity Range: 8-90% non-condensing
Power Supply: Redundant hot-swappable 650W AC-DC power supply, 100-240V AC, 50-60 Hertz
Power Supply Safety/EMC: USA-UL/Canada-CUL/Germany-TUV/EN 60950 Compliant/IEC 60950 Compliant/CB Report/CCC Certification
Network Interfaces: Two 10/100/1000 copper network interface

McAfee Network DLP Appliance 3650:

Form Factor: 3RU
Dimensions: (H x W x D) / Weight: 5.2 x 17.2 x 25.5 in 132 x 437 x 648 mm 72 lbs / 32.7 kg
Optional Expansion Cards: External storage interconnection card
Datastore Capacity: 6TB
Drive Bays: 16
Disk Capacity: 500GB
Disk Technology: SATA2
RAID: RAID-1 and RAID-5
System Memory: 16GB
System Fans: 3 cooling fans/redundant rear exhaust fans
Operating Temperature:10-35 degrees (C)/ 50-95 degrees (F)
Humidity Range: 8-90% non-condensing
Power Supply: Redundant hot-swappable 800W AC-DC power supply, 100-240V AC, 50-60 Hertz
Power Supply Safety/EMC: USA-UL/Canada-CUL/Germany-TUV/EN 60950 Compliant/IEC 60950 Compliant/CB Report/CCC Certification
Network Interfaces: 210/100/1000 copper network interface

Technical Specifications:

Configurations Supported
McAfee Network DLP Discover is supported on either the McAfee Network DLP Discover 1650 Appliance (1U) or McAfee Network DLP Discover 3650 Appliance (3U).

Capture and Index Capacity
McAfee Network DLP Discover supports indexing of up to 5TB of information and up to 2 million documents on the McAfee Network DLP Discover 1650 Appliance (1U), and up to 50TB of information and up to 25 million documents on the McAfee Network DLP Discover 3650 Appliance (3U). For environments where the amount of information or number of files exceeds the limits of a single system, additional appliances can be deployed in parallel.

System Throughput
Up to 500Mbps content fetching throughput and up to 150Mbps content indexing throughput. Assumes target nodes are capable of sustaining throughput equivalent to or greater than that provided by McAfee.

Scan operations can be throttled to control network burden if needed, and integrate cleanly with campus and WAN QoS architectures.

Content Types
The McAfee Network DLP Discover Appliance supports file classification of over 300 content types, including:

• Office Documents
• Multimedia Files
• Source Code
• Design Files
• Archives
• Encrypted Files
• Built-in Policies
• Intellectual property

Policy Definition
Powerful policy definition and rule configuration, including keywords, regular expressions, and concepts. Document registration to rules including network path scanning on a configurable schedule. Thresholds based on percentage
match. Document expiration and version tracking. Exclusion to discriminate between non-sensitive and sensitive information. Context definition to restrict rule and policy enforcement to specific scan operations.

Repositories Supported
Common Internet File System/Server Message Block (CIFS/SMB support includes Microsoft WindowsLinux/UNIX/Apple with Samba, Novell with NFAP), Network File System (NFS support includes Linux/UNIX/Apple), HTTP (wiki, blog, portals), HTTPS, FTP, Microsoft Sharepoint, EMC Documentum

Document Registration
Documents can be registered from any repository as mentioned above. Signatures from registered documents can be used locally for detecting proliferation of sensitive material, or to other McAfee DLP Appliances.

Learning Applications
Powerful analytics engine for incident and search result views allow you to customize summary views based on any two contextual pivot points. List and detail views, as well as summary views with trending are available. All reports are customizable and can be saved for later use, or scheduled for periodic delivery. Over 20 pre-built reports are provided with the system.

Reporting
Powerful analytics engine for incident and search result views allow you to customize summary views based on any two contextual pivot points. List and detail views, as well as summary views with trending are available. All reports are customizable and can be saved for later use, or scheduled for periodic delivery. Over 20 pre-built reports are provided with the system.

Remediation
McAfee Network DLP Discover provides integrated case management. Both products support notification to content owners or system administrators using configurable notification messages.