Mcafee Epolicy Orchestrator DATA SHEET
Total Page:16
File Type:pdf, Size:1020Kb
DATA SHEET McAfee ePolicy Orchestrator Centrally get, visualize, share, and act on security insights Security management requires cumbersome juggling between tools and data. This puts the adversary at an advantage by offering more time to exploit the gap not seen between the tools and do damage. In addition, the cybersecurity workforce is limited and needs to be empowered to manage cybersecurity complexity. The McAfee® ePolicy Orchestrator® (McAfee ePO™) management platform removes the time-consuming and potential human error effort and inspires those responsible to manage security quicker and with higher efficacy. Fundamental Security Proven Advanced Security Management Start with the fundamentals. Core to any security More than 30,000 businesses and organizations trust architecture is the ability to monitor and control the the McAfee ePO console to manage security, streamline health of endpoints and systems. Industry standards and automate compliance processes, and increase such as Center for Internet Security (CIS) Controls and overall visibility across endpoint, network, and security National Institute of Standards Technology (NIST) SP operations. Big companies rely on the McAfee ePO 800 153 security and privacy controls call this out as console’s highly scalable architecture, allowing large a must. The McAfee ePO console allows you to gain enterprises to manage hundreds and thousands of critical visibility and set and automatically enforce nodes from a single console. The McAfee ePO console policies to ensure a healthy security posture across provides an enterprise security administrator with the your enterprise. Policy management and enforcement opportunity to simplify policy maintenance, pull in third- across security products for your entire enterprise party threat intelligence leveraging Data Exchange Layer is accomplished from a single console, removing the (DXL), and integrate policies bi-directionally with an array complexity of managing multiple products. This essential of products. These operational efficiencies cut down Connect With Us security is fundamental to your IT security compliance. process and data-sharing overhead, allowing a faster, more precise response. 1 McAfee ePolicy Orchestrator DATA SHEET Efficiency Conquers Sprawl A Sample List of Products Managed by McAfee ePO ESG research shows that 40% of organizations use 10 to McAfee Products Third-Party Products 25 tools, while 30% use 26 to 50 tools to manage billions McAfee Endpoint Protection Guidance Software: enCase (Threat Prevention, Firewall, Web Enterprise of new threats and devices. This diversity of product Control) use creates complexity and multiplies the operational McAfee Drive Encryption Avecto: Privilege Guard payoff of a unified management experience—from McAfee File and Removable AccessData: AccesData installation through reporting. McAfee embraces these Media Protection Enterprise requirements with a “Together is power” approach to McAfee Active Response Autonomic Software: Power Manager, Patch Manager security management that allows you to consolidate McAfee Management for Xerox MFP the sprawl while protecting the breadth of your Optimized Virtual Environments assets, supporting threat intelligence, managing open (McAfee MOVE) McAfee Data Loss Prevention DXL source data, and integrating third-party products. (McAfee DLP) McAfee provides centralized command and control for McAfee Policy Auditor compliance and management across a range of security McAfee Enterprise Security products. You can quickly pivot across products to find Manager the critical data and take the necessary policy action. McAfee Threat Intelligence Exchange The McAfee ePO console also allows you to invest in McAfee Application Control next-generation technologies and integrate them with McAfee Cloud Workload Security existing assets within a single framework. McAfee Advanced Threat Defense McAfee Content Security Reporter McAfee Database Activity Monitoring 2 McAfee ePolicy Orchestrator DATA SHEET Use Case Examples: How the McAfee ePO Console Creates Centralized Management of Security Products Product and Technology Sample Centralized Management Use Case Benefit McAfee ePO McAfee Endpoint Security discovers a known malicious file on Quick containment of a bad endpoint an endpoint. The McAfee ePO console sets a stricter policy McAfee Endpoint Security on the endpoint to quarantine it. This is done in one common management interface. McAfee ePO McAfee Enterprise Security Manager detects significant data Automatic data loss policy exfiltration on an endpoint and tags it in the McAfee ePO enforcement McAfee DLP console. The McAfee ePO console applies data loss protection McAfee Enterprise Security Manager policies to block the data and advise the user that this is not in compliance. Integration Examples Product and Technology Integrated Use Case Benefit McAfee ePO McAfee Endpoint Security flags a suspicious host. The McAfee Increased proactive protection ePO console can trigger additional scans. This is communicated McAfee Endpoint Security to Cisco ISE via PxGrid and the DXL exchange (the McAfee DXL ePO console). Cisco ISE can isolate the host until it is deemed acceptable. Cisco Identity Service Engine (ISE) Cisco PxGrid Avecto Defendpoint Deploy and manage the industry-leading, privilege management Reduction in complexity solution, Avecto Defendpoint, from McAfee ePO. Avecto McAfee ePO No additional infrastructure, lowering Defendpoint configuration changes are informed by McAfee TCO DXL Threat Intelligence Exchange application reputation data. Privilege access changes based on McAfee Threat Intelligence Exchange threat intelligence Rapid7 Nexpose McAfee ePO shares assets list to Nexpose. This enables you to Reduce complexity gain an understanding of risk posture from your McAfee ePO McAfee ePO Gain a comprehensive and reliable console and allows you to set policy accordingly. Vulnerability posture and prioritize actions to DXL data is shared with the DXL community of vendors. minimize risk from one dashboard Check Point NGTX This integration facilitates bi-directional and real-time Decrease time to detect intelligence sharing between the network and endpoints. Check Point NGTP Block and remediate attacks Events are shared with the DXL community. McAfee ePO DXL McAfee Active Response McAfee Enterprise Security Manager 3 McAfee ePolicy Orchestrator DATA SHEET Organizations with integrated platforms are better protected and achieve faster response times than their counterparts without integrated platforms. “The most powerful endpoint management Integrated Organizations Not Integrated Organizations Suffered less than five breaches last year 78% 55% platform on the Discovered threats in eight hours 80% 54% market today, McAfee 2016 Penn Schoen Berland ePolicy Orchestrator, this product is the underlying management Extensible Workflows Streamline Processes Common Use Cases tool for all of the The McAfee ePO database provides flexible, automated ■ Save time and eliminate redundant and labor-intensive company’s security management capabilities so you can rapidly identify, efforts by scheduling security compliance reports to products, and it offers manage, and respond to vulnerabilities, changes in meet the needs of each stakeholder. the power and flexibility security postures. and known threats from single ■ Easily integrate the McAfee ePO console into your that enterprise buyers console. You define how the McAfee ePO console should existing business processes and functions by desire. The security direct alerts and security responses based on the type leveraging its robust set of APIs to gain more insight and criticality of security events for your environment and accelerate workflows (for example, integrate with capabilities are broad and your policies and tools. To support development ticketing systems, web applications, or self-service and tightly integrated operations and security operations, the McAfee ePO portals). through a common platform allows you to create automated workflows ■ Maintain your security posture by deploying agent and policy engine and between your security and IT operations systems to security solutions as new machines are added to your quickly remediate issues. Use the McAfee ePO console intelligence stream.” corporate network by syncing the McAfee ePO console to trigger remediation actions by your IT operations with Active Directory. —Forrester Wave: Endpoint systems, like assigning stricter policies. Leveraging its Security Suites 2016 web application programming interfaces (APIs) reduces manual effort. 4 McAfee ePolicy Orchestrator DATA SHEET Rapid Mitigation and Remediation Centralized Security The McAfee ePO platform has built-in, advanced Management capabilities to increase the efficiency of the security operations staff when they mitigate a threat or make a change to restore compliance. McAfee ePO Automatic Scalale Workflow Enterrise Response can trigger an action based on an event that Automation occurs. Actions can be simple notifications or approved Grade remediation. Common Use Cases for Automatic Response ■ McAee ePolicy Notifying administrators of new threats, failed Security ashoards rchestrator updates, or high-priority errors via email or SMS based Partner and Comliance on predetermined thresholds Ecosystem eorting ■ Applying policies based on client or threat events, such as a policy to prevent external communications when a host may be compromised (this would deny APIs or Centralized command and control activities) or blocking