McAfee Total Protection for Server

McAfee Total Protection for Server Overview:

McAfee Total Protection for Server redefines server security by proactively securing against known and zero-day attacks while enabling uptime and availability. The ability to ensure only authorized processes and code run, coupled with strong change management controls, further mitigates the risk of data breaches and targeted attacks.

Description:

McAfee Total Protection for Server redefines server security by preserving uptime and availability while proactively securing against known and zero-day attacks. The ability to ensure only authorized processes and code run, coupled with strong change management controls, further mitigates the risk of data breaches and targeted attacks. New levels of efficiency are achieved through the centralized management of security and compliance functions, reducing the number of hours required to manage processes and saving money through decreased hardware requirements. Total Protection for Server is a single solution that comprises anti-virus, application control change policy management, and policy auditing functionality.

Security that preserves system availability and uptime — Lightweight components enable organizations to easily lock down systems against unauthorized code, processes, and unwanted change.

Flexible deployment options — Organizations can select which components to run and configuration options based on their deployment scenarios.

Continuous compliance — Compliance is followed by continuously monitoring file integrity and enforcing best-practice secure configurations for a sustainable model.

McAfee Total Protection for

• McAfee VirusScan® Enterprise software
• McAfee VirusScan Enterprise for Linux software
• McAfee Application Control for Servers software
• McAfee Change Control for Servers software
• McAfee Policy Auditor software
• McAfee ePolicy Orchestrator software

Benefits and Features:

Solutions:

IT operations is challenged with striking the delicate balance between preserving uptime and server availability with ensuring strong security for their servers and the data that resides on them. This often leads IT to make trade-offs with security to ensure uptime, but, in the process, their servers are left vulnerable to malware, insider attacks, and data breaches.

McAfee redefines enterprise server security through a unified security and compliance solution—the McAfee® Total Protection™ for Server solution—with a single management platform and lightweight components that preserve system availability while ensuring optimal security. This solution enables new levels of efficiency by reducing the number of hours required to manage processes and decreasing hardware requirements.

Many companies have reduced security at the server (beyond selective use of anti-virus) in an effort to preserve availability. Traditional security solutions can introduce latency and hamper server operations as well as disrupt critical processes and applications. However, the threat landscape has continued to evolve, and servers are a prime target. According to SANS, in 2009 web server attacks accounted for 60 percent of all attacks. Hackers are after a foothold in the corporate network to steal valuable and sensitive data. What’s needed is a way to ensure optimal security that does not negatively impact availability and uptime.

Introducing McAfee Total Protection for Server
McAfee Total Protection for Server has been uniquely architected to protect your missioncritical servers and data residing on those servers while helping to conserve processing power for critical applications and processes. McAfee Total Protection for Server enables complete visibility and control over sensitive data and system access to manage risk exposure as well as detailed compliance reporting. It requires very low initial setup and ongoing operational overhead.

Optimized Security Posture that Preserves Availability and Uptime
Complete threat coverage is achieved through a combination of blacklisting (anti-virus) and dynamic whitelisting as well as strong change management controls that further mitigate the risk of targeted attacks and data breaches. The inclusion of lightweight security components preserves processing power for critical applications by ensuring that only authorized processes and code can run.

Increased Operational Efficiency
Combining security and compliance functions into a single solution reduces the number of hours required to manage processes and requires fewer pieces of hardware, resulting in significant dollar savings. Further cost efficiencies are gained through the ability to address application and file server security needs with a single solution, helping to consolidate licenses.

Organizations can select configuration options and which components to run based on their deployment scenarios. Adding and removing components and changing configuration options are made easy though centralized management.

Continuous Compliance
Strong change policy management and continuous file integrity monitoring provides a sustainable compliance model. For those compliance standards that require the test and verification of security controls, such as PCI-DSS, this provides alerting and rich auditable data on server-level changes. Key regulatory and industry security policy templates are included and enable organizations to easily measure and prove compliance against key policies and standards.

Key Features

• Delivers maximum protection from today’s threats with the combination of blacklisting and whitelisting
• Prevents execution of all unauthorized code, scripts, and DLLs, and further defends against memory exploits with memory protection and in-memory scanning
• Small overhead footprint of application control and change policy management minimizes impact on CPU cycles
• Simple setup and low initial and ongoing operational overhead
• Easily accommodates existing change processes across connected or disconnected servers and endpoints
• Administrators with physical or remote access to the machine cannot override protection
• Centralized administration further alleviates IT overhead.

Operational Processes Flow
McAfee Total Protection for Server has been architected to seamlessly meld with IT operations processes. The combination of policy auditing, blacklisting, and whitelisting enables organizations to not only define and converge to a good state but also to lock system configurations. Policy auditing provides best practices templates to report against.

The McAfee ePO Platform Consolidates and Centralizes Management for all McAfee Products
By using a single, integrated management platform companies greatly reduce the number of IT managers needed to manage endpoint security with multiple consoles. The McAfee ePO platform enables them to:

• Access centralized event monitoring, reports, dashboard, and workflow through a single, web-based, management platform
• Deploy, manage, and update agents and policies from one management platform.
• Provides rich forensic and audit reporting features reducing the overall cost of compliance

Integration and Compatibility with McAfee Solutions
McAfee Total Protection for Server has been designed to work in a variety of network topologies and firewall configurations. It integrates seamlessly with multiple McAfee solutions, including:

• McAfee Vulnerability Manager, which enables organizations to leverage agentless policy compliance scans as well as scan for vulnerabilities at the network level
• McAfee Endpoint Encryption, which enables organizations to encrypt critical files as required by key mandates
• McAfee Total Protection for Endpoint customers will also benefit from enhanced control of endpoints and servers

System Requirements:

Note: The following are minimum system requirements only. Actual requirements will vary depending on the nature of your environment.

Operating Systems

• Microsoft Windows 7
• Microsoft Windows 2008
• Microsoft Windows 2008 R2
• Microsoft Windows XP
• Microsoft Windows 2003
• Microsoft Windows 2000
• Linux
  • Red Hat
  • Centos 5, 4
  • Oracle EL 5
  • Solaris 10, 9, 8

McAfee Virus Scan, McAfee Application Control, McAfee Change Control, and McAfee Policy Auditor separately support additional operating systems.

Documentation:

Download the McAfee Total Protection for Server Datasheet (PDF).