McAfee Network Data Loss Prevention (DLP) Discover

McAfee Network DLP Discover Overview:

McAfee Network DLP Discover finds your sensitive data even if you don’t know where it is located. Using advanced network crawling technology, Network DLP Discover searches systems based on LAN segment, IP address range, network group, and many other easily defined criteria—without the help of a database administrator. Schedule scans to run at intervals that fit your workflow and automatically fingerprint results to support the most accurate data protection.

Description:

McAfee Network DLP Discover protects your enterprise against data loss by finding sensitive information that resides on laptops, shared file servers, portals, company databases, and document management systems, including Microsoft SharePoint. It even identifies complex sensitive data, such as intellectual assets that are harder to define than fixed data like credit card and Social Security numbers.

Network DLP Discover delivers automatic network scanning of all accessible resources, including laptops, desktops, servers, file-transfer locations, document repositories, portals, and databases. Its intuitive and unified policy creation ensures that you can use discovered data to build accurate and effective policies, without the trial and error required by some solutions. Network DLP Discover also streamlines incident workflow and case management. As sensitive information is found, Network DLP Discover alerts you to data that is located in places that are unsafe and then collates these alerts into easily customizable dashboards to support rapid mitigation.

Determine What Information to Protect
To identify information and proliferation risks, McAfee Network DLP Discover can be configured to scan specific repositories and identify data for explicit protection. Additionally, all data crawled by McAfee Network DLP Discover is indexed and made accessible through an intuitive interface.

Define Policies for Protection
McAfee Network DLP Discover provides intuitive and unified policy creation, reporting, and management to give you more control over your information-protection strategy for data at rest.

Scan Your Network for Violations
After policies are defined, McAfee Network DLP Discover can be instructed to routinely scan network resources for policy violations. Flexible scheduling options are available to perform continuous, daily, weekly, or monthly scans. McAfee Network DLP Discover also automatically scans all accessible resources, including laptops, desktops, servers, document repositories, portals, and file-transfer locations, for policy violations.

Review and Remediate Violations
McAfee Network DLP Discover eliminates or minimizes proliferation of sensitive material through integrated incident workflow and case management. If McAfee Network DLP Discover finds content that violates protection policies, it generates incidents and sends notifications.

Capture and Analyze Stored Data
McAfee Network DLP Discover indexes all content found at rest in the network and provides you with the ability to query and mine this information to understand your sensitive data. McAfee Network DLP Discover lets you quickly understand your sensitive data, how it is used, who owns it, where it is stored, and to where it has proliferated.

Benefits and Features:

System Requirements:

McAfee Network DLP Discover is supported on either the McAfee Network DLP Discover 1650 Appliance (1U) or the McAfee Network DLP Discover 3650 Appliance (3U).

Index up to 5 TB of information and up to 2 million documents on the McAfee Network DLP 1650 Appliance (1U). Index up to 50 TB of information and up to 25 million documents on the McAfee Network DLP 3650 Appliance (3U). For environments where the amount of information or number of files exceeds the limits of a single system, additional appliances can be deployed in parallel.

Platform Specifications:

McAfee Network DLP Appliance 1650:

Form Factor: 1RU
Dimensions: (H x W x D) / Weight:1.7 x 17.2 x 27.75 in. 43 x 437 x 705 mm 39 lbs / 17.7 kg
Optional Expansion Cards: External storage interconnection card
Datastore Capacity: 500GB
Drive Bays: 4
Disk Capacity: 500GB
Disk Technology: SATA2
RAID: RAID-1
System Memory: 16GB
System Fans: 6 cooling fans
Operating Temperature:10-35 degrees (C)/ 50-95 degrees (F)
Humidity Range: 8-90% non-condensing
Power Supply: Redundant hot-swappable 650W AC-DC power supply, 100-240V AC, 50-60 Hertz
Power Supply Safety/EMC: USA-UL/Canada-CUL/Germany-TUV/EN 60950 Compliant/IEC 60950 Compliant/CB Report/CCC Certification
Network Interfaces: Two 10/100/1000 copper network interface

McAfee Network DLP Appliance 3650:

Form Factor: 3RU
Dimensions: (H x W x D) / Weight: 5.2 x 17.2 x 25.5 in 132 x 437 x 648 mm 72 lbs / 32.7 kg
Optional Expansion Cards: External storage interconnection card
Datastore Capacity: 6TB
Drive Bays: 16
Disk Capacity: 500GB
Disk Technology: SATA2
RAID: RAID-1 and RAID-5
System Memory: 16GB
System Fans: 3 cooling fans/redundant rear exhaust fans
Operating Temperature:10-35 degrees (C)/ 50-95 degrees (F)
Humidity Range: 8-90% non-condensing
Power Supply: Redundant hot-swappable 800W AC-DC power supply, 100-240V AC, 50-60 Hertz
Power Supply Safety/EMC: USA-UL/Canada-CUL/Germany-TUV/EN 60950 Compliant/IEC 60950 Compliant/CB Report/CCC Certification
Network Interfaces: 210/100/1000 copper network interface

System throughput

Up to 500 Mbps content fetching throughput
Up to 150 Mbps content indexing throughput
Assumes target nodes are capable of sustaining throughput equivalent to or greater than that provided by McAfee. Scan operations can be throttled to control network burden and integrate cleanly with campus and WAN QoS architectures.

Technical Specifications:

Configurations Supported
McAfee Network DLP Discover is supported on either the McAfee Network DLP Discover 1650 Appliance (1U) or McAfee Network DLP Discover 3650 Appliance (3U).

Capture and Index Capacity
McAfee Network DLP Discover supports indexing of up to 5TB of information and up to 2 million documents on the McAfee Network DLP Discover 1650 Appliance (1U), and up to 50TB of information and up to 25 million documents on the McAfee Network DLP Discover 3650 Appliance (3U). For environments where the amount of information or number of files exceeds the limits of a single system, additional appliances can be deployed in parallel.

System Throughput
Up to 500Mbps content fetching throughput and up to 150Mbps content indexing throughput. Assumes target nodes are capable of sustaining throughput equivalent to or greater than that provided by McAfee.

Scan operations can be throttled to control network burden if needed, and integrate cleanly with campus and WAN QoS architectures.

Content Types
The McAfee Network DLP Discover Appliance supports file classification of over 300 content types, including:

• Office Documents
• Multimedia Files
• Source Code
• Design Files
• Archives
• Encrypted Files
• Built-in Policies
• Intellectual property

Policy Definition
Powerful policy definition and rule configuration, including keywords, regular expressions, and concepts. Document registration to rules including network path scanning on a configurable schedule. Thresholds based on percentage
match. Document expiration and version tracking. Exclusion to discriminate between non-sensitive and sensitive information. Context definition to restrict rule and policy enforcement to specific scan operations.

Repositories Supported
Common Internet File System/Server Message Block (CIFS/SMB support includes Microsoft WindowsLinux/UNIX/Apple with Samba, Novell with NFAP), Network File System (NFS support includes Linux/UNIX/Apple), HTTP (wiki, blog, portals), HTTPS, FTP, Microsoft Sharepoint, EMC Documentum

Document Registration
Documents can be registered from any repository as mentioned above. Signatures from registered documents can be used locally for detecting proliferation of sensitive material, or to other McAfee DLP Appliances.

Learning Applications
Powerful analytics engine for incident and search result views allow you to customize summary views based on any two contextual pivot points. List and detail views, as well as summary views with trending are available. All reports are customizable and can be saved for later use, or scheduled for periodic delivery. Over 20 pre-built reports are provided with the system.

Reporting
Powerful analytics engine for incident and search result views allow you to customize summary views based on any two contextual pivot points. List and detail views, as well as summary views with trending are available. All reports are customizable and can be saved for later use, or scheduled for periodic delivery. Over 20 pre-built reports are provided with the system.

Remediation
McAfee Network DLP Discover provides integrated case management. Both products support notification to content owners or system administrators using configurable notification messages.

Documentation:

Download the McAfee Network DLP Discover Datasheet (PDF).