McAfee Network Data Loss Prevention (DLP) Manager

McAfee Network DLP Manager Overview:

McAfee Network Data Loss Prevention (DLP) Manager is designed for large and mid-sized environments that have multiple McAfee Network DLP appliances deployed throughout the network. It provides complete control over multiple McAfee Network DLP appliances.

Description:

In today's business environment, losing or compromising sensitive information is not an option. In order to reduce the risk of data loss, organizations must be able to learn what information is— and is—not sensitive and manage its access, storage, transfer, and use from a single, intuitive management console.

With McAfee Network DLP Manager, you have a single view into all McAfee Network DLP appliances and host agents distributed throughout the network. This uniquely enables McAfee DLP Network learning applications to minimize the time and cost associated with understanding and protecting your sensitive data.

McAfee Network DLP Manager reduces the overall operational expenditure associated with managing and maintaining an information security infrastructure by allowing you to centrally:

• Manage all policies and rules
• Access incident and case-management workflows
• Perform searches against one, or multiple, McAfee Network DLP appliances
• Configure and monitor multiple McAfee Network DLP appliances

Collaborative Incident Workflow and Case Management
McAfee Network DLP Manager provides a permissions and workflow framework that encompasses your entire environment and provides roles-based access control. This makes it possible for multiple users in the same organization to collaborate on incident workflow and case management.

Control of Incident Views Based on Role
With complete role-based access control, you are provided with macro-level risk reporting and statistics as well as micro-level incident information and actions that map directly to organizational responsibilities. You can control these views through role permissions to ensure that users are able to see only incidents that are relevant to their job function.

Benefits and Features:

 

System Requirements:

McAfee Network DLP Manager System Features

Centralized Policies and Rules

• Automatically distribute polices and rules to specific or to all McAfee Network DLP appliances
• Configure and distribute action rules, including email notification, encryption, blocking, quarantining, redirection, and bouncing

Incident Workflow

• Centralize the correlation of incidents into a unified incident dashboard
• Escalate incidents through an embedded case-management tool
• Delegate responsibility for a specific case among key users
• Use a false-positive workflow to eliminate false positives
• Automatically update rules affected by workflow changes

Case Management

• Consolidate and address group-related incidents that require remediation and involve the same stakeholders
• Implement flexible incident and case logic.  Multiple incidents can belong to a case, or a single incident can belong to multiple cases
• Escalate incidents to different teams
• Access a case history (audit trail) that includes notes
• Export cases for offline viewing
• Email case owners a notification if a change is made to a case

Reports and Incidents

• Access a centralized view of all incidents that have been generated by any McAfee Network DLP appliance or McAfee Host DLP agent anywhere in the network
• Generate reports that cover one, multiple, or all McAfee Network DLP appliances
• Automate reporting with 50 packaged reports, each of which is configurable and can be scheduled for automatic email delivery in PDF and CSV formats

Dynamic Filters

• Quickly filter information to get to the specific data view
• Automatically populate filters by clicking the contents of a cell within a table view
• Dynamically add, remove, and compound filters

Pre-configured Roles

• Expedite setup using pre-configured roles for key members of teams within the organization, including administrators, legal, human resources, compliance, operations, and information security
• Define additional roles with a few mouse click
• Assign permissions to a role in a granular manner
• Integrate with LDAP or Microsoft Active Directory for centralized authentication services

Centralized Device Management

• Configure and manage McAfee Network DLP appliances from a single interface
• Check the status of any managed McAfee Network DLP appliance, including CPU utilization, disk utilization, and network throughput
• View any remediation alarms and alerts that are generated by any managed McAfee Network DLP appliance