McAfee Network Threat Behavior Analysis

McAfee Network Threat Behavior Analysis Overview:

Maintain a comprehensive and efficient network security infrastructure with McAfee Network Threat Behavior Analysis (NTBA). A single sensor effectively collects traffic, and analyzes host and application behavior to detect worms, zero-day threats, botnets, and reconnaissance attacks.

Description:

Get cost-effective, network-wide visibility with McAfee Network Threat Behavior Analysis (NTBA).

McAfee NTBA monitors and reports unusual network behavior by analyzing traffic from switches and routers from vendors such as Cisco, Juniper Networks, and Extreme Networks. It comes fully equipped with quad-core processors, a RAID array, distinct flow capacity, gigabit Ethernet connectivity, and offline storage area network connectivity.

McAfee NTBA collects and analyzes traffic from the entire network—host and applications—to detect worms, botnets, zero-day threats, spam, and reconnaissance attacks. It reports any unusual behavior to help you maintain a comprehensive and efficient network security infrastructure.

McAfee NTBA seamlessly integrates with the McAfee Network Security Platform intrusion prevention system to build a comprehensive and robust security infrastructure.

Benefits and Features:

Solutions:

Get complete visibility into network behavior and threats

The McAfee® Network Threat Behavior Analysis enhancement provides greater real-time visibility of the network infrastructure. It leverages network flow data to identify and characterize threats beyond the perimeter of the intrusion prevention system (IPS).

By analyzing traffic from switches/routers of vendors such as Cisco, Juniper, and Extreme Networks, McAfee Network Threat Behavior Analysis can pinpoint risky behavior to specific points in the network and effectively prevent internal and external threats. McAfee Network Threat Behavior Analysis rapidly drills down into complex, multivector attacks and blended threats. It holistically evaluates network-level threats, identifies the overall behavior of each network element, and enables instant abstraction of potential anomaly or attack type—including distributed denial of service (DDoS), botnets, or worms.

The McAfee Network Threat Behavior Analysis analyzer appliance is fully equipped with quadcore processors, RAID disk array, and gigabit Ethernet connectivity. It also provides offline storage area network (SAN) connectivity. With its distinct flow capacity, it can handle large amounts of network traffic, facilitating quicker traffic analysis.

McAfee Network Threat Behavior Analysis seamlessly integrates with the McAfee Network Security Platform IPS. It facilitates the common management of McAfee Network Threat Behavior Analysis, McAfee Network Access Control (McAfee NAC), and IPS sensors through the McAfee Network Security Manager.

McAfee Network Threat Behavior Analysis enforces stricter compliance by providing visibility to events such as unauthorized application usage and user behavior. It verifies key PCI DSS requirements and significantly enhances “audit confidence.”

It also correlates threat information across the network under the common umbrella of McAfee NSM and McAfee® ePolicy Orchestrator® (McAfee ePO™) software. McAfee Network Threat Behavior Analysis facilitates the maintenance of a comprehensive and efficient network security infrastructure while being sensitive to cost and human effort.

Key Benefits

Minimize IT and business risk

• Proactive, behavior-based threat detection
• Effective detection of unknown threats
• Monitors and reports unusual network behavior by network traffic analysis
• Detects attacks to help avoid network penetration
• Identifies and responds to unauthorized application usage quickly
• Helps ensure regulatory compliance through integration with McAfee Network Security Platform, McAfee ePO, and McAfee Vulnerability Manager

Maximize coverage and value

• Provides cost-effective, network-wide visibility
• Effortless sorting and analysis of network traffic
• Prevents manual diagnosing of network-related traffic problems
• Pinpoints problem segments
• Anomaly detection includes zero-day, spam, botnet, and reconnaissance attacks

Enhance competitive advantage

• Provides an additional layer of security
• Prevents network threats and exploits from interrupting business operations
• Performs analysis tasks quickly and efficiently
• Delivers enterprise-level performance and ensures reliability
• Simplifies operations concerned with threat and signature management
• Accelerates network performance, scalability, and flexibility
• Empowers real-time security decisions

Integration helps ensure regulatory compliance

• Integrates with McAfee Network Security Platform IPS for correlation of unusual network behavior associated with network intrusions
• Integrates with McAfee ePO software and McAfee Vulnerability Manager software to enable faster security risk management

Key Features

Fully equipped for high performance

• Each McAfee Network Threat Behavior Analysis analyzer appliance incorporates:
  • Quad-core processors
  • RAID disk array
  • Gigabit Ethernet connectivity
  • Offline SAN storage
  • Distinct flow capacity
• Addresses today’s evolving security and network needs
• Provides affordable and reliable network-class performance

Unmatched network visibility and insight

• Enables cost-effective network wide visibility by collecting traffic from the entire network through a single McAfee Network Threat Behavior Analysis sensor
• Monitors and reports unusual network behavior through traffic analysis
• Identifies threats through behavior-based algorithms
• Analyzes both host and application behavior
• Inspects networks for worm, botnet, or spamassociated behavior
• Probes against zero-day threats and reconnaissance attacks

Easy integration and policy enforcement

• Integrates with McAfee Network Security Platform IPS to correlate any unusual network behavior caused by network intrusions
• Integrates seamlessly with McAfee ePO software and McAfee Vulnerability Manager software
• Compatible with switches/routers of vendors like Cisco, Juniper, Extreme Networks
• Facilitates common management of McAfee Network Threat Behavior Analysis, McAfee NAC, and IPS sensors through the McAfee Network Security Manager
• Promotes internal and regulatory policy enforcement

System Requirements:

McAfee Network Threat Behavior Analysis (NTBA) is a self-contained device. There are no minimum software or hardware system requirements.

Documentation:

Download the McAfee Network Threat Behavior Analysis Datasheet (PDF).