McAfee Network Data Loss Prevention (DLP) Manager

McAfee Network DLP Manager Overview:

McAfee Network DLP Manager provides a flexible, efficient, and cost-effective data control solution, delivering streamlined incident monitoring, dynamic searching, and easy policy building. Network DLP Manager allows you to configure, control, and monitor all McAfee DLP components from a single interface.

Description:

With McAfee DLP deployed throughout your network, McAfee Network DLP Manager is the flexible, efficient, and cost-effective data control solution to deliver streamlined incident monitoring, dynamic searching, and easy policy building. Network DLP Manager allows you to configure, control, and monitor all McAfee DLP components from a single interface.

Gain incident visibility — Network DLP Manager allows you to view all incidents generated by McAfee DLP anywhere in your network.

Quickly create reports — With Network DLP Manager, you can quickly generate reports that cover one, multiple, or all McAfee DLP components, and combine incidents and cases as needed to fit your workflow.

Perform sensitive data searches — Network DLP Manager allows you to perform searches against all McAfee DLP components to find sensitive data, learn how it is used, fine-tune rules, and validate policies on the fly.

Get started quickly — You can deploy preconfigured policies for common regulations such as HIPAA and PCI.

Expedite setup with built-in roles — Network DLP Manager’s built-in roles expedite setup for key team members. You can add custom administration roles, allowing any user to configure, manage, monitor, and respond to any data or incident within their control.

End-to-End Data Loss Prevention Management

McAfee® Data Loss Prevention (DLP) Manager is designed for large and mid-sized environments that have multiple McAfee DLP appliances deployed throughout the network. An intuitive, centralized management interface, McAfee DLP Manager provides complete control over these appliances.

With McAfee DLP Manager, you have a single view into all McAfee DLP appliances and host agents distributed throughout the network. This enables McAfee DLP learning applications to minimize the time and cost associated with understanding and protecting sensitive data.

McAfee DLP Manager reduces the overall operational expenditure associated with managing and maintaining a security infrastructure by allowing you to accomplish these functions from a central console:

• Manage all policies and rules
• Access incident and case management workflows
• Perform searches against one or multiple, McAfee DLP appliances
• Configure and monitor multiple McAfee DLP appliances

Collaborative Incident Workflow and Case Management

McAfee DLP Manager provides a permissions and workflow framework that encompasses your entire environment and provides role-based access control. Multiple users in the same organization can collaborate on incident workflow and case management.

By enabling cross-discipline involvement, McAfee DLP Manager lets you extend your information protection without increasing the number of people required to support it. It also makes it possible to engage subject-matter experts (for instance, legal, HR, compliance, and content or business owners) in the examination, analysis, and remediation of incidents. Those experts can also help define what data should be protected.

Control of Incident Views Based on Role

With complete role-based access control, you get macro-level risk reporting and statistics as well as micro-level incident information and actions that map directly to organizational responsibilities. You can control these views through role permissions so users see only incidents that are relevant to their job functions. For instance, role-based access control ensures that a compliance user can't perform specific administrative tasks. It also ensures that the same user doesn't see intellectual property incidents, or that a content owner doesn't see incidents related to privacy or compliance data.

Benefits and Features:

System Requirements:

McAfee DLP Manager, McAfee DLP Monitor, McAfee DLP Discover, and McAfee DLP Prevent are now supported on the McAfee DLP 4400 appliance. The DLP 4400 appliance is an Intel-based platform with dual six core CPUs, 24 GB of RAM and 8 TB of storage in a 2U form factor. DLP hardware appliance solutions are self-contained devices. There are no minimum software or hardware system requirements or additional database installations required.

With the release of McAfee Data Loss Prevention (DLP) 9.2, McAfee DLP Manager, McAfee DLP Monitor, McAfee DLP Discover, and McAfee DLP Prevent are also available as virtual appliances. McAfee DLP virtual appliances run on VMware ESX or VMware ESXi 4.1 servers.

McAfee DLP 4400 Appliance
Mother Board	Intel TimberCreek System (S5520URR)
CPU	2x Intel X5660, 12M Cache, 2.8 GHz (6 cores)
Memory	24 GB P1333 DDR3
Hard Drives	12 x 1 TB 7,200 rpm 3.5" SATA drives (8 TB usable storage)
Network Interfaces	Intel Dual Copper 1 Gb Ethernet I/O Module
RAID Controller	Intel RS2MB044
NIC Card	Intel Dual Copper 1Gbps Ethernet I/O Module
DVD Drive	SATA DVD ROM
IPMI	Intel Remote Management Modules 3 (AXXRMM3)
Power Supply	2 x 760W hot-swap Power Supply Modules
Dimensions	17.57"W x 30.79"D x 3.43"H Form factor: 2RU
Weight	67 lbs.
Temperature	Operating temperature: 10°–35° C/50°–95° F Humidity range: 8%–90%, non-condensing
Compliance	NRTL Certification (US/Canada)CB Certification (International) CE Declaration of Conformity (CENELEC Europe) FCC/ICES-003 Class A Attestation (USA/Canada) USA-UL VCCI Certification (Japan) C-Tick Declaration of Conformity (Australia) MED Declaration of Conformity (New Zealand) BSMI Certification (Taiwan) GOST R Certification / Certification (Russia) CC Certification (Korea) IRAM Certification (Argentina) Ecology Declaration (International) China RoHS Environmental Friendly Use Period Packaging & Product Recycling Marks SABS (South Africa) NOM/NYCE (Mexico) CCC Certification (China) CC EAL 2+ FIPS-compliant encryption algorithms Security Technical Implementations Guide (STIG)
Virtual Appliance Minimum Hardware Requirements
CPU	Intel Quad Core
Memory	8 GB RAM
Hard Drive(s)	Drive 1: 128 GB for VM software Drive 2: 640 GB for DLP virtual image
Network Ports	2 ports for DLP Monitor application 1 port for DLP Prevent, DLP Manager, or DLP Discover applications
BIOS	Enable VT thread

 

Technical Specifications:

Centralized Policies and Rules

• Automatically distribute polices and rules to specific or to all McAfee Network DLP appliances
• Configure and distribute action rules, including email notification, encryption, blocking, quarantining, redirection, and bouncing

Incident Workflow

• Centralize the correlation of incidents into a unified incident dashboard
• Escalate incidents through an embedded case-management tool
• Delegate responsibility for a specific case among key users
• Use a false-positive workflow to eliminate false positives
• Automatically update rules affected by workflow changes

Case Management

• Consolidate and address group-related incidents that require remediation and involve the same stakeholders
• Implement flexible incident and case logic.  Multiple incidents can belong to a case, or a single incident can belong to multiple cases
• Escalate incidents to different teams
• Access a case history (audit trail) that includes notes
• Export cases for offline viewing
• Email case owners a notification if a change is made to a case

Reports and Incidents

• Access a centralized view of all incidents that have been generated by any McAfee Network DLP appliance or McAfee Host DLP agent anywhere in the network
• Generate reports that cover one, multiple, or all McAfee Network DLP appliances
• Automate reporting with 50 packaged reports, each of which is configurable and can be scheduled for automatic email delivery in PDF and CSV formats

Dynamic Filters

• Quickly filter information to get to the specific data view
• Automatically populate filters by clicking the contents of a cell within a table view
• Dynamically add, remove, and compound filters

Pre-configured Roles

• Expedite setup using pre-configured roles for key members of teams within the organization, including administrators, legal, human resources, compliance, operations, and information security
• Define additional roles with a few mouse click
• Assign permissions to a role in a granular manner
• Integrate with LDAP or Microsoft Active Directory for centralized authentication services

Centralized Device Management

• Configure and manage McAfee Network DLP appliances from a single interface
• Check the status of any managed McAfee Network DLP appliance, including CPU utilization, disk utilization, and network throughput
• View any remediation alarms and alerts that are generated by any managed McAfee Network DLP appliance

Documentation:

Download the McAfee Network DLP Manager Datasheet (PDF).