+ All Categories
Home > Documents > McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to...

McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to...

Date post: 14-Jun-2020
Category:
Upload: others
View: 24 times
Download: 0 times
Share this document with a friend
13
. Intel Security Confidential . Speaker Name | Title McAfee Endpoint Security: Reasons to Migrate to version 10.5
Transcript
Page 1: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential

.Speaker Name | Title

McAfee Endpoint Security:Reasons to Migrate to version 10.5

Page 2: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential

a

New Advanced Defense Capabilities!

2

Dynamic Application Containment Real Protect Machine Learning

• Contains greyware & its ability to make changes on the endpoint

• Works online or offline• Saves “Patient zero” and thwarts

spread

• Detects more “zero-day” malware than any previous signature-based method

• Backed by machine learning analytics

• Uses data analytics in cloud to classify

Note: available in version 10.5 and purchase of CETP suite or ETD add-on

Page 3: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential

An Optimized and Consolidated Platform

3

Simplifies the technologies you

already have while also allowing multiple

endpoint defense technologies to

communicate and collaborate against new and advanced

threats.

3 core modules: Threat Prevention, Web Control and Firewall – deploy together or individually

Adaptive Threat Protection Module and other technologies can be easily added and are integrated

VSE’s 12 policies are now optimized and covered by 5 Threat Prevention policies

Future scanners and content can be deployed without requiring point product binary updates.

Page 4: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential

Host Intrusion Protection integration

4

Majority of features are now integrated in Endpoint Security

Intrusion PreventionMemory Exploit Mitigation

ThreatPrevention

Firewall

Host Intrusion

Protection (HIPS)

Host Intrusion Firewall

Move from a point product to integrated

capabilities and simplify

management

Page 5: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential

Endpoint Security version 10.5 is “Web Gateway Ready”

5

Integrated proxy client and policies

On-network

Off-network

ENS

ENS

• Blocks malware safely away from endpoints

• Equal protection for off-network users

• Offloads malware prevention burden from the endpoint

New McAfee Web SaaS Service

Page 6: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential

Better Remediation, Intelligence, Threat Forensics

6

Threat Forensics Available with ENS

Detect, understand, and track the attack

Machine Host Name

Ipv6 Address

Ipv4 Address

Mac

Location

TargetIpv4 Address Parent Process SignedIpv6 Address Parent Process SignerPort NameURL PathShare Name File SizeMac Modify TimeProtocol Access TimeUser Name Create TimeProcess Name Device Display NameHash Serial NumberSigned Device VIDSigner Device PIDDescription

Detection FeatureNameVersionContent VersionContent Creation DateRule IDRule NameReg InfoGTI QueryName

Threat DataEvent IDSeverityNameTypeAction TakenHandledDetected On CreateImpactEvent ID

SourceIpv4 Address File Path

Ipv6 Address File Size

Port Hash

URL Signed

Share Name Signer

Mac Modify Time

User Name Access Time

Process Name Create Time

Parent Process Name Device Serial Number

Parent Process Hash Device VID

Parent Process Signed Source Description

Parent Process Signer

AdditionalCleanable

Task Name

API Name

First Attempted Action

Second Attempted Action

First Action Status

Second Action Status

Event ID Description

Natural Language Description

Duration Before Detection

Attack Vector Type

Direction

ICMP Type

Firewall Event Type

Throttled Event Count

Page 7: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential

Usability Improvements

7Sources: Intel Security Internal testing

Zero impact user scans for greater end user productivity

Less agents to manage and scan avoidance reduces manual efforts for

administrators

Cross-platform policies for Windows and Mac environments

Intuitive, easy-to-read user interface

Page 8: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential

Better Performance

8

• Get to the data that matters more quickly in an easy-to-read format

• Less impact to your user’s surfing experience and common OS actions

• Less impact to systems, more productive users

Faster User Interface launch time34%17% Faster during web browsing and File Copy

Source: AV Comparatives: Competitive Performance Benchmark and Efficacy Analysis, October 2016

38% Faster during installation of applications

12% Faster during system boot up• Better protection doesn’t have to mean a slower system

How does ENS compare to McAfee legacy endpoint products?

Page 9: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential

Migration Tools Make it Easy

9

The Migration Assistant was created to educate and aid customers in migrating data to the ENS platform.

Automatic migration can create new policies and client tasks automatically, based on your current product settings, and assign them to groups and managed systems based on your current assignments.

Manual migration lets you select the settings you want to migrate and, optionally, edit them. Manual migration does not retain assignments.

Automatic Migration Manual Migration

Select what items you want to migrate:• Policies• Client tasks• Catalog (FW only)

Select what items you want to migrate:• Policies• Client tasks

Preview policy migration results

Configure policies or tasks

Migrated items are created and assigned automatically

Migrated items are created

Manually assign migrated items

Repeat to migrate additional items

Page 10: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential

It’s Ready for the FutureEasily Enhance ENS with Other Integrated Solutions – Today and Tomorrow

Centralized visibility and adaptive protection

Open Vendor Participation to simplify complex environments

A cohesive system to orchestrate and apply insights

10

Data Exchange LayerUltra-fast persistentbidirectional messaging fabric

Intel Security

Solutions

3rd PartyThreat

Intelligence

Innovation Alliance Partners

3rd PartyVendors

Page 11: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential

Download it today

Simply log into McAfee ePO and ENS is available in the Software Manager

Existing Endpoint Suites Customers Have Access Now

11

Learn more about ENS or migrating to it:• ENS landing page• The ENS 10 Expert Center• Recommended Upgrade Paths to

Endpoint Security 10.x• Visit the ENS migration page:

www.mcafee.com/movetoens

Page 12: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential12

Page 13: McAfee ENS reasons to migrate - McAfee McAfee Training€¦ · McAfee Endpoint Security: Reasons to Migrate to version 10.5. Intel Security Confidential a New Advanced Defense Capabilities!

.

Intel Security Confidential

Deployment Requirements

13

Microsoft WorkstationsMacintoshePOMcAfee Agent

Windows 10, 8.1, 8.0, 7.0, Vista

Windows Embedded 8.1, 8, 7

Microsoft Servers

Windows 2012, 2012 R2

Windows 2008, 2008 R2

Windows Small Business Server 2011, 2008

Windows Embedded 2009

Windows Point of Service 2009, 1.1

Mac OS X (server and workstation):

El Capitan 10.11x,

Yosemite 10.10x

Mavericks 10.9x

ePO 5.1.1 or later

ePO Cloud 5.5

McAfee Agent 5.02 or later


Recommended