McAfee Policy Auditor

McAfee Policy Auditor Overview:

Need reliable proof of compliance? Never fear. McAfee Policy Auditor was built from the ground up to automate the processes required for internal and external IT audits. Its proven agent, extensive support for content standards, and transparent integration with McAfee ePolicy Orchestrator® (ePO™) mean accurate, efficient audits, every time. So you can get back to managing risk, not paperwork.

Description:

By mapping IT controls against predefined policy content, McAfee Policy Auditor helps you report consistently and accurately against key industry mandates and internal policies across your infrastructure or on specific targeted systems. Policy Auditor is an agent-based IT audit solution that leverages the Security Content Automation Protocol (SCAP) to automate the processes required for internal and external IT audits.By mapping IT controls against predefined policy content, McAfee Policy Auditor helps you report consistently and accurately against key industry mandates and internal policies across your infrastructure or on specific targeted systems. Policy Auditor is an agent-based IT audit solution that leverages the Security Content Automation Protocol (SCAP) to automate the processes required for internal and external IT audits.

Streamlined deployment and management — The McAfee ePolicy Orchestrator (ePO) platform provides easy Policy Auditor deployment, and simplified reporting and compliance management.

Flexible policy formation — Within minutes, Policy Auditor allows for the creation of new policies designed by you, set by corporate governance, or from authoritative sites such as Federal Desktop Core Configuration (FDCC). Real-time audits and controls for setting the frequency of data capture deliver timely information for compliance.

Predefined templates and controls — Policy Auditor comes with predefined benchmark templates and the ability to ensure protection of the business by employing blackout windows that halt data capture during key business periods.

McAfee Policy Auditor is an agent-based, purpose-built IT audit solution that leverages the XCCDF and OVAL security standards to automate the processes required for internal and external IT audits. By mapping IT controls against pre-defined policy content, Policy Auditor helps you report consistently and accurately against policies. Policy Auditor ships with templates for seven benchmarks: PCI DSS, SOX, GLBA, HIPAA, FISMA, and the best practice frameworks ISO 27001 and COBiT, and you can

Seamless integration with McAfee ePolicy Orchestrator® (ePO™) eases agent deployment, management, and reporting. The single ePO console lowers cost of ownership by consolidating endpoint security management and compliance management. You save hardware, training, and operational costs and get unified control over the policies and protections on each host. The ePO web dashboard represents policy compliance by benchmark and lets you sort details or view by organization. Custom reports can be fully automated, scheduled, or exported.

A Continuous Audit Model automates the process of ensuring up-to-date data for audits and built in waivers support business processes.

Through innovation and integration, Policy Auditor targets operational processes to streamline every step of compliance validation. Find out how simple and fast proving compliance can be.

Four Policy Auditor tabs in the ePO console make it easy to deploy policies and manage audit processes.

Benefits and Features:

Solutions:

Efficienctly automate audit processes with advanced, purpose-built IT auditing software.

Raise Productivity, Lower Audit Costs
If compliance mandates are intended to improve security, why do audits and endpoint policy management take so much time away from managing IT risk? That’s because myriad point processes and products result in ad hoc efforts and error.

McAfee® Policy Auditor software offers an optimized approach. Integration and innovation produce real ROI and significant productivity gain, while making audits painless and less expensive.

Prove Compliance with Key Industry Mandates
By mapping IT controls against predefined policy content, McAfee Policy Auditor software automates manual audit processes and helps you report consistently and accurately against internal and external policies. McAfee Policy Auditor software ships with benchmark templates for a variety of compliance mandates: PCI DSS, SOX, HIPAA, FISMA, and the best-practice frameworks ISO 27001 and COBIT. Templates cover Microsoft Windows, Sun Solaris, Linux Red Hat, HP/UX, and Apple Macintosh (Mac) OS-X platforms.

Cut Management Effort with McAfee ePolicy Orchestrator® Software Integration
Seamless integration with McAfee ePO™ software eases agent deployment, management, and reporting. The single ePO console lowers cost of ownership by consolidating endpoint security management and compliance management. You save money on hardware, training, and operational costs and get unified control over the policies and protection on each host.

Unified Policy Audits Reduce Time to Compliance
Organizations can run consolidated audits across both managed (agent-based) and unmanaged (agentless) systems. From the ePO console, they can define and select a unified policy benchmark once and have the assessment performed across many different asset types. This reduces the effort needed to run audits and, for the first time, provides organizations with a single unified report across all assets.

Use Scripting to Extend McAfee Policy Auditor Software Check Capabilities
Create rules from any scripting language supported by the system being audited to extend the check capabilities of policy agents further. Sample languages include VBScript, batch files, Perl, and Python.

Meet the New Standard in Compliance Validation: SCAP
McAfee Policy Auditor software sets a new standard with its aggressive implementation of the Secure Content Automation Protocol (SCAP) family. This open standard enables interoperability among products and services and helps reduce audit time, expense, and effort. Supported protocols include:

• eXtensible Checklist Configuration Description Format (XCCDF)
• Open Vulnerability and Assessment Language (OVAL)
• Common Vulnerabilities and Exposures (CVE)
• Common Configuration Enumeration (CCE)
• Common Platform Enumeration (CPE)
• Common Vulnerability Scoring System (CVSS)

Import and Adapt Industry Benchmarks in Minutes
Through SCAP support and its own innovative engineering, McAfee helps you validate compliance easily, even when benchmarks and policies change. Download benchmarks from authoritative sites, such as the Federal Desktop Core Configuration (FDCC) benchmark on the NIST website, and view detailed security guidance to benchmarks. Uniform benchmarks limit misinterpretations among security teams and external auditors.

Ensure Up-To-Date Data and Reduce Disruptions
An innovative continuous audit model helps security and audit teams ensure data is current and accurate. It eliminates manual data generation for internal and external audits. To prevent disruption to critical business applications, a blackout window lets IT operations specify times when audits may not be conducted.

Align Business and Audit Processes
Audits are never convenient, but they can now be less disruptive. You can document and grant waivers to justify deviations from policy, and set expiration dates to limit exposure.

• Exemption—Excuses a system from all audits
• Suppression—An exception that is suppressed from reports

Simplify Trouble Ticketing
When audits detect issues, ePO helps you create and track them easily. Optional integrations let you push tickets to third-party trouble ticketing systems like Remedy.

Enforce Compliance Through McAfee Remediation Manager Software
Go beyond identifying problems. Import McAfee Policy Auditor software results into McAfee Remediation Manager software for automated remediation of noncompliant systems.

Continuous Compliance Through McAfee Change Control Software
Audit and remediate and then prevent unauthorized changes ensuring continuous compliance to policy.

McAfee Solution Services
Along with our McAfee SecurityAlliance™ partners, McAfee offers a wide variety of services to help you assess, plan, deploy, tune, and manage your security and compliance efforts.

System Requirements:

Install McAfee Policy Auditor on a server or desktop class system, and place an agent on each host to be audited.

System Requirements

Operating Systems:

• Microsoft Windows 7
• Microsoft Windows Vista
• Microsoft Windows XP Pro
• Microsoft Windows 2000 (Advanced/Professional), 2003 (Enterprise/Standard), 2008
• Microsoft Windows XP, 2003, 2008 R1
• Red Hat Enterprise Linux 3.0
• Red Hat Enterprise Linux (AS, ES, WS) 4.0, 5.0, 5.1
• MAC OS X 10.4, 10.5
• HP-UX (RISC) 11iv1, 11iv2
• AIX (Power5, Power6) 5.3 TL8 SP5, 6.1 TL2 SP0

Server and console:

• Free disk space: 1GB minimum (first-time installation); 1.5 GB minimum (upgrade); 2 GB recommended
• Memory: 1 GB RAM minimum (2–4 GB recommended)
• CPU: Pentium III-class 1.0 GHz or better (1.5 GHz or better, multi-processor or dual-core recommended)
• OS: Microsoft® Windows® 2000 SP4/Windows Server 2003 SP1/2 R2 (32-bit) only

McAfee agents:

• Pentium-class, Celeron, or compatible processor
• Memory: 512 MB RAM minimum (1 GB recommended)
• Free disk space: 100MB
• OS: Windows 2000, XP, 2003, Vista, Linux Red Hat, Solaris, Macintosh, HPUX

Database software:

• Microsoft SQL Server 2005, MSDE 2000, or SQL 2000

Remote console:

• New web-based console only requires a web browser

Web browser:

• Microsoft Internet Explorer 6.0 SP1 or later

Documentation:

Download the McAfee Policy Auditor Datasheet (PDF).