McAfee Network Data Loss Prevention (DLP) Prevent

McAfee Network DLP Prevent Overview:

McAfee Network DLP Prevent helps enforce safe data handling policies for information leaving the boundaries of your network. It integrates with most commercial Internet gateway security technologies for email, web, instant messaging, and other network applications.

Description:

McAfee Network DLP Prevent protects against data loss by ensuring that data only leaves the network when appropriate—whether through email, webmail, instant messenger, wikis, blogs, portals, HTTP/HTTPS, or FTP transfers. If a policy violation is detected, Network DLP Prevent can, at your choice, encrypt, redirect, quarantine, or even block the data transmission in question. This supports compliance with privacy regulations and reduces the likelihood of data breaches, while enabling legitimate data use.

Network DLP Prevent delivers comprehensive scans of inbound and outbound network traffic across all ports, protocols, and content types. Using comprehensive data classification, it automatically identifies and protects more than 300 different content types (including complex CAD design files) in over 13 languages. Customized views and incident reports provide summary and detailed views of security incidents and the mediation actions taken.

Benefits and Features:

System Requirements:

Network DLP Prevent is supported on either the Network DLP Prevent 1650 Appliance (1U) or the Network DLP Prevent 3650 Appliance (3U).

Network DLP Prevent supports indexing and storage for objects in motion. The Network DLP Prevent 1650 Appliance provides 500 GB of usable storage capacity, and the Network DLP Prevent 3650 Appliance provides 6 TB of usable storage capacity. For environments where the amount of information exceeds storage capacity or higher levels of retention are required, multiple devices can be deployed or an external storage array can be attached.

Platform Specifications:

McAfee Network DLP Appliance 1650:

Form Factor: 1RU
Dimensions: (H x W x D) / Weight:1.7 x 17.2 x 27.75 in. 43 x 437 x 705 mm 39 lbs / 17.7 kg
Optional Expansion Cards: External storage interconnection card
Datastore Capacity: 500GB
Drive Bays: 4
Disk Capacity: 500GB
Disk Technology: SATA2
RAID: RAID-1
System Memory: 16GB
System Fans: 6 cooling fans
Operating Temperature:10-35 degrees (C)/ 50-95 degrees (F)
Humidity Range: 8-90% non-condensing
Power Supply: Redundant hot-swappable 650W AC-DC power supply, 100-240V AC, 50-60 Hertz
Power Supply Safety/EMC: USA-UL/Canada-CUL/Germany-TUV/EN 60950 Compliant/IEC 60950 Compliant/CB Report/CCC Certification
Network Interfaces: Two 10/100/1000 copper network interface

McAfee Network DLP Appliance 3650:

Form Factor: 3RU
Dimensions: (H x W x D) / Weight: 5.2 x 17.2 x 25.5 in 132 x 437 x 648 mm 72 lbs / 32.7 kg
Optional Expansion Cards: External storage interconnection card
Datastore Capacity: 6TB
Drive Bays: 16
Disk Capacity: 500GB
Disk Technology: SATA2
RAID: RAID-1 and RAID-5
System Memory: 16GB
System Fans: 3 cooling fans/redundant rear exhaust fans
Operating Temperature:10-35 degrees (C)/ 50-95 degrees (F)
Humidity Range: 8-90% non-condensing
Power Supply: Redundant hot-swappable 800W AC-DC power supply, 100-240V AC, 50-60 Hertz
Power Supply Safety/EMC: USA-UL/Canada-CUL/Germany-TUV/EN 60950 Compliant/IEC 60950 Compliant/CB Report/CCC Certification
Network Interfaces: Two 10/100/1000 copper network interface

Technical Specifications:

Configurations Supported
McAfee Network DLP Prevent is supported on either the McAfee Network DLP Prevent 1650 Appliance (1U) or the McAfee Network DLP Prevent 3650 Appliance (3U).

Capture and Index Capacity
The McAfee Network DLP Prevent Appliance supports indexing and storage for objects found in motion. The McAfee Network DLP Prevent 1650 Appliance (1U) provides 500GB of usable storage capacity, and the McAfee Network DLP Prevent 3650 Appliance (3U) provides 6TB of usable storage capacity. For environments where the amount of information exceeds storage capacity or higher levels of retention are required, multiple devices can be deployed or an external storage array can be attached.

System Throughput
Up to 200Mbps of full content analysis, indexing, and storage throughput per McAfee Network DLP Prevent Appliance is available. For networks with higher throughput requirements, multiple devices can be used in a load-balanced configuration.

Network Integration
The McAfee Network DLP Prevent Appliance integrates passively into the network using either a SPAN port or a physically-inline network tap (optional).

Content Types
The McAfee Network DLP Prevent Appliance supports file classification of over 300 content types, including:

• Office Documents
• Multimedia Files
• Source Code
• Design Files
• Archives
• Encrypted Files
• Built-in Policies
• Intellectual property

Protocols Supported
The McAfee Network DLP Prevent Appliance supports HTTP, HTTPS, FTP, and Instant Messenger protocols via the ICAP protocol to an ICAP-compliant proxy. Please refer to your proxy vendor for protocols supported by your proxy.

Built-In Policies
The McAfee Network DLP Prevent Appliance provides built-in policies and rules for common requirements including:

• Compliance: For example, PCI, GLBA, HIPAA, SOX, Personally Identifiable Information, Patient Health Information, SSN, CCN, stripe data, financial information, etc.
• Intellectual property: For example, source code, internal memos, product documents, patent applications, business strategy documents, pricing information, etc.
• Acceptable use: For example, resumes, discrimination, harassment, violence, inappropriate language, weapons, user account information.

Remediation
The McAfee Network DLP Prevent Appliance provides integrated case management. It also supports notification to senders, recipients, content owners, or system administrators using configurable notification messages.

The McAfee Network DLP Prevent Appliance provides mail enforcement via SMTP integration with MTA devices using X-Headers for blocking, bouncing, encrypting, quaranting, and redirecting.

The McAfee Network DLP Prevent Appliance provides traffic enforcement via ICAP integration with ICAP-compliant web proxies for blocking content violations over IM, FTP, HTTP, HTTPS, and webmail.

Reporting
The McAfee Network DLP Prevent Appliance's powerful analytics engine, for incident and search result views, allows you to customize summary views based on any two contextual pivot points. List and detail views, as well as summary views with trending are available. All reports are customizable and can be saved for later use, or scheduled for periodic delivery. Over 20 pre-built reports are provided with the system.

Documentation:

Download the McAfee Network DLP Prevent Datasheet (PDF).