McAfee Data Loss Prevention Endpoint

Integration with third-party user behavioral analytics (UEBA) tackles insider threat. It conducts security analytics to detect unusual and highly risky user and entity behavior.

McAfee DLP Prevent

Across each department of every company, individuals share data using multiple applications and a variety of protocols.

McAfee Endpoint Encryption

McAfee Endpoint Encryption offers multiple layers of protection against data loss with several integrated modules that handle specific areas of risk.

McAfee Endpoint Protection Suite

Organizations need a strategy for threat protection, detection, and correction, as well as a security framework that empowers security components to collaborate against targeted attacks for rapid detection and action.

MCAFEE DATA LOSS PREVENTION ENDPOINT

McAfee DLP Endpoint key features include:

• Integration with third-party user behavioral analytics (UEBA) tackles insider threat. It conducts security analytics to detect unusual and highly risky user and entity behavior. Alerts are sent back to McAfee® ePO DLP Incident Manager, and stops suspicious behavior even if there is no existing DLP policy in place.
• Feature parity for PCs and Macs help protect your most sensitive data wherever it resides.
• Manual classification empowers users to manually classify documents, increases employee data protection awareness, and reduces administrative burden.
• User-initiated scan and remediation allows users to run endpoint discovery scans and perform self-remediation actions.
• Classification is flexible and includes dictionaries, regular expressions and validation algorithms, registered documents, and support for third-party user classification solutions
• Unique tagging technology identifies documents according to their origin helps prevent sensitive information from web applications, network applications, and network shares from being duplicated, renamed, or leaving the corporate premises.
• Enhanced virtualization support protects remote desktops and virtual desktop infrastructure (VDI) solutions.

Centralized Management

Now natively integrated with McAfee ePO software, McAfee DLP Endpoint can be centrally deployed and easily administered. The completely redesigned McAfee DLP Endpoint management interface offers flexible and reusable rule sets with enhanced granularity and improved user experience.

Here are some key features:

• It shares the same policy and classification engines, and incident workflows with McAfee® Network DLP.
• Natively integrated with McAfee ePO software, McAfee DLP Endpoint no longer requires an Internet Explorer ActiveX control to be installed for administration.
• Multiple policies and reusable rule sets offer you the ability to define multiple DLP policies across the organization and help you create policies according to office, department, regulation, and more. 
• Enhanced granularities in incident management can query/filter/view by any incident property (for example, device serial number, evidence file name, and groups).
• Centralized event monitoring and auditing capabilities.
• Improved role-based access control (also known as separation of duties) for policy management, as well as incident review.
• Easy-to-access help desk interface

MCAFEE DLP PREVENT

Enforcement of Security Policies for Data in Motion

Across each department of every company, individuals share data using multiple applications and a variety of protocols. Guard against inadvertent or intentional data loss by proactively protecting sensitive information from leaving the network and enforce correct business processes. McAfee® DLP Prevent helps you enforce policies for information leaving the network through email, webmail, IM, wikis, blogs, portals, HTTP/HTTPS, and FTP transfers by integrating with message transfer agent gateways using simple mail transfer protocol (SMTP) or ICAP-compliant web proxies.

Upon encountering a policy violation, McAfee DLP Prevent allows you to take a variety of actions, including applying encryption, blocking, redirecting, quarantining, and more, so you can ensure compliance with regulations governing the privacy of sensitive information and reduce the risk of security threats.

Fully Unified with McAfee ePolicy Orchestrator Software

McAfee DLP Prevent is fully unified with McAfee® ePolicy Orchestrator® (McAfee ePO™) software and McAfee® Data Loss Prevention Endpoint (McAfee DLP Endpoint) with common policy, incident and case management. Administrators can create a single email and web protection policy in McAfee ePO software and deploy it to endpoints and the network. In addition, McAfee DLP Endpoint and McAfee DLP Prevent share a common classification engine that allows for a single email and web policy. Common dictionaries and regular expression (regex) syntax provide continuity for creating common web and email protection rules. With centralized management, McAfee DLP solutions provide single-pane-of-glass visibility and help increase business efficiency and reduce administrative overhead.

Monitor Mobile Email

McAfee® DLP Prevent for Mobile Email provides content-aware protection to mobile email by intercepting emails downloaded to mobile device via ActiveSync proxy with DLP capability. In addition, it is capable of intercepting ActiveSync on both onpremises Microsoft Exchange and on Microsoft Office 365 Hosted Exchange. It is fully managed from McAfee ePO software and is included as part of the McAfee DLP Prevent license. It does not require any agent installation on mobile devices. With McAfee DLP Prevent for Mobile Email, enterprises can monitor email for compliance and evidence collection and can protect both managed and unmanaged mobile devices.

Integration with Web Proxies and MTAs for Greater Protection

McAfee DLP Prevent integrates with web proxies (using ICAP) and with MTAs (using X headers) for the required action. Because it terminates unauthorized transactions at the application layer rather than simply dropping the TCP session, which does nothing to modify application behavior, McAfee DLP Prevent alerts the initiating application that the transmission was denied due to a policy breach. This ensures greater data protection for your organization because McAfee DLP Prevent learns what must be protected and stops the application from attempting the same behavior again.

McAfee DLP Prevent tích hợp với proxy web (sử dụng ICAP) và với MTA (sử dụng tiêu đề X) cho hành động cần thiết. Vì nó chấm dứt các giao dịch trái phép ở lớp ứng dụng thay vì chỉ đơn giản là bỏ phiên TCP, không có gì để sửa đổi hành vi ứng dụng, McAfee DLP Prevent cảnh báo ứng dụng khởi tạo rằng việc truyền bị từ chối do vi phạm chính sách. Điều này đảm bảo bảo vệ dữ liệu lớn hơn cho tổ chức của bạn vì McAfee DLP Prevent tìm hiểu những gì phải được bảo vệ và ngăn ứng dụng thử lại hành vi tương tự.

Protection for Known and Unknown Sensitive Information

With the ability to classify more than 300 different content types, McAfee DLP Prevent helps you ensure that the security of the information you are aware of remains confidential—Social Security numbers, credit card numbers, and financial data. It also helps you learn what information or documents require protection, such as highly complex intellectual property. McAfee DLP Prevent includes a wide range of built-in policies, ranging from compliance to acceptable use to intellectual property, enabling you to match entire and partial documents to a comprehensive set of rules so you can protect all your sensitive information, both known and unknown.

Customizable Views and Incident Reports

Using McAfee ePO software, you can customize summary views of security incidents and subsequent actions based on any two contextual pivot points. List and detail views, as well as summary views with trending, are available at your fingertips. McAfee DLP Prevent also includes a large number of pre-built reports, each of which can be viewed, saved for later use, or scheduled for periodic delivery.

Complex Data Classification

McAfee DLP Prevent empowers your organization to protect all kinds of sensitive data - from common, fixed-format data to complex, highly variable intellectual property. By combining these objectclassification mechanisms, McAfee DLP Prevent leverages a highly accurate, detailed classification engine that blocks sensitive information and identifies hidden or unknown risks. Object classification mechanisms include:

• Multilayer classification: Covers both contextual information and content in a hierarchical format
• Document registration: Includes signatures of information as it changes
• Grammar analysis: Detects grammar or syntax of everything from text documents to spreadsheets to source code
• Statistical analysis: Tracks the number of times a signature, grammar, or biometric match occurred in a particular document or file
• File classification: Identifies content types regardless of the extension applied to the file or compression

MCAFEE ENDPOINT ENCRYPTION

Protect More Data in More Places

McAfee Endpoint Encryption offers multiple layers of protection against data loss with several integrated modules that handle specific areas of risk. Powerful encryption is extended to PCs, laptops, network files and folders, mobile devices, removable media, and portable storage devices. And businesses can secure a broader scope of information including customer data, intellectual property, legal and financial records, and employee communications. The suite uses industry-leading encryption algorithms including AES-256 and RC5-1024 for strong protection.

With support for single sign-on, portable authentication and secure offline user recovery, users have easy yet secure access to information. No matter what type of data or where it moves, we’ve got it covered.

Integrated Capabilities and Centralized Management

McAfee Endpoint Encryption leverages the award-winning McAfee ePolicy Orchestrator® (ePO™) infrastructure for automated security reporting, monitoring, deployment, and policy administration. The Endpoint Encryption suite allows organizations to efficiently encrypt and decrypt devices any time, without interrupting users or system performance. And encrypted devices can be monitored, always ensuring safe use. Administrators can customize settings, choosing to encrypt certain folders or files created by particular applications. It is also easy to grant or prohibit access by individuals or user groups.

An Easier Path to Compliance and Lower TCO

Centralized management features and integrated capabilities make it easy and cost-effective for organizations to ensure consistent protection across the enterprise. Mandatory company-wide security policies can be effortlessly enforced behind the scenes. And auditing capabilities make it simpler to demonstrate compliance with internal and external security requirements.

The Endpoint Encryption suite is easily integrated with other McAfee security products, as well as existing enterprise systems, giving businesses a comprehensive security solution while easing deployment and reducing the total cost of ownership for businesses.

McAfee Endpoint Encryption delivers complete protection for all endpoints, in one integrated, centrally managed solution. It helps organizations maintain data integrity and business continuity, even as threats become more pervasive. You can trust McAfee to provide security solutions that will let you stay focused on what you do best: running a successful business.

MCAFEE ENDPOINT PROTECTION SUITE

Intelligent, Collaborative Defenses

Organizations need a strategy for threat protection, detection, and correction, as well as a security framework that empowers security components to collaborate against targeted attacks for rapid detection and action.

McAfee Endpoint Security communicates with multiple endpoint defense technologies in real time to analyze and collaborate against new and advanced threats, blocking and quickly halting them before they impact your systems or users. Its framework helps remove duplicate technologies and connect other Intel Security solutions to enable simpler management and stronger defenses. Additionally, McAfee Global Threat Intelligence provides insights from the largest volume of observations and analysis available in the market.

Advanced Email Virus and Spam Protection

Our solution scans your inbound and outbound emails to intercept spam, inappropriate content, and harmful viruses. We can quarantine suspicious emails to prevent evolving email threats from affecting your network and users. And a layer of antivirus protection for your email server prevents malware from reaching user inboxes.

Comprehensive Device Control

We make it possible to prevent critical data from leaving your company through removable media, such as USB drives, iPods, Bluetooth devices, recordable CDs, and DVDs. Tools help you monitor and control data transfers from all desktops, even if a device is physically disconnected from the corporate network.

Integrated Firewall

Control desktop applications that can access the network to stop network-borne attacks and downtime. Our integrated firewall bars unsolicited inbound traffic, and controls outbound traffic even during startup while the firewall policy is being applied. It’s also possible to deploy and manage firewall policies based on location to deliver complete protection and compliance with regulatory rules.

Proactive Web Security

Many web threats are silent and invisible to web surfers. Help ensure compliance and reduce risk from web surfing by warning users about malicious websites before they visit. You can also authorize and block website access based on users and groups, controlling user access to sensitive or inappropriate sites, such as gaming or adult content. Lastly, private URLs can be blocked, and the latest versions of multiple web browsers are supported.

Management That Lowers Operational Costs

All of the capabilities of the McAfee Endpoint Protection Suite are managed by McAfee ePolicy Orchestrator® (McAfee ePO™) software, a centralized platform that manages security, enforces protection, and lowers the cost of security operations. Web-based for easy access, it provides intelligent security for quick and effective decisions and greater control.

McAfee ePO software can reduce the cost of managing IT security and compliance by giving more rapid visibility and management for all the endpoints in your environment as well as other Intel Security protection capabilities and 130+ third-party security solutions.

This open management framework takes advantage of a single agent and single console design. Compared to old-style point solutions, our streamlined approach dramatically simplifies installation and maintenance of defenses and their associated rules and policies. It eliminates the system impact of multiple agents and the decision inefficiencies of multiple consoles. When policies need to be revised, updates happen quickly, accurately, and consistently.

You can correlate threats, attacks, and events from endpoint, network, and data security as well as compliance audits to improve the relevance and efficiency of security efforts and compliance reports. No other vendor can claim a single integrated management platform across all these security domains.

Deploy Quickly and Easily

Enable increased protection without delay. The EASI installer gets your strong protection running in as few as four clicks. Integration with McAfee ePO software lets you deploy and manage security using a single environment.

Migration Made Easy

Environments with current versions of McAfee ePO software, McAfee® VirusScan® Enterprise, and the McAfee agent can leverage our automatic migration tool to migrate your existing policies to McAfee Endpoint Security 10 in about 20 minutes or less.