McAfee, the global leader in network intrusion prevention systems (IPS), today announced its network security framework which integrates advanced network intrusion prevention with essential next-generation controls. The solution addresses a need for security tools to prevent increasingly sophisticated attacks, with sufficient intelligence and automation to take the guesswork out of attack prevention and resolution.

The network security framework includes the new McAfee Network Security Platform 7 which features application visibility and integrated threat-context, aligning it with Gartner's criteria for next-generation network IPS in its report, "Defining Next-Generation Network Intrusion Prevention" as published on Oct. 7, 2011.1 According to the report, "Threats are focusing on installing targeted malicious executables onto user PCs, which use advanced techniques to avoid detection and use botnet delivery mechanisms to perform multistage attacks. Simply stopping attacks that are looking for unpatched servers is no longer sufficient in this environment."

"Gartner uses the term 'next-generation network IPS' to indicate the necessary evolution of network IPS to deal with changes in network communications and applications and changes in the threat landscape," says Greg Young, Gartner Research. "As a minimum, a next-gen IPS will have standard first-generation IPS capabilities plus application awareness, context awareness, content awareness especially providing full stack inspection."

The McAfee network security framework includes the following aspects:

  • Advanced Network IPS: With tens of thousands of sensors deployed worldwide, McAfee Network Security Platform is the industry's leading Network IPS, protecting more enterprises worldwide than any other vendor. Its protocol-based inspection provides leading protection against advanced malware, zero-day attacks, DDoS attacks, and botnets. The latest release includes new DoS, DDoS prevention capabilities and dozens of new botnet heuristics to more accurately and confidently identify misbehaving systems.
  • Application awareness and control: The McAfee Network Security Platform is the first and only IPS solution to combine advanced threat prevention and application awareness into a single security decision engine. It includes Layer 7 visibility of over 1,100 applications and enhanced rule definition for simple application control, including the ability to correlate application activity with network attacks to intelligently affect security enforcement decisions.
  • Predictive threat intelligence: McAfee's network security framework incorporates McAfee Global Threat Intelligence (GTI), providing organizations with superior protection against emerging threats. It is the only IPS solution that can affect inline security decisions based on the identity and reputation of hundreds of billions of file, IP, URL, protocol, and geo-location data.
  • Context-aware security: Separating noise from legitimate threats can take up most of a security administrator's day. McAfee network security framework correlates data from several sources - McAfee GTI, vulnerability scans, application visibility, network behavior - to confidently identify attacks, eliminate false positives and make dynamic enforcement recommendations. For example, a medium confidence 'alert-only' event can be dynamically upgraded to a high confidence 'block' event based on the correlation of built-in attack definitions and IP reputation intelligence.
  • Content analysis: Targeted attacks using advance malware techniques are becoming increasingly common, and cybercriminals are finding ways around traditional black-list based security systems. Integration with advanced malware detection, network forensics and data loss prevention tools make McAfee's network security framework the ultimate tool against theft of an organization's intellectual property.

"To fully understand and eradicate targeted attacks, you need complete visibility of all network traffic, its source and scope, and whether it occurred days, weeks, or months in the past," said Steve Shillingford, President and CEO of Solera Networks. "McAfee Network Security Platform's integration with Solera's DeepSee? applications delivers a seamless workflow to security analysts taking you from an alert to irrefutable evidence of the attack, breach or threat, dramatically reducing the time it takes to pinpoint compromises."

By incorporating application visibility, external reputation data, behavior-based threat analysis and advanced malware detection workflows into a single solution, McAfee network security framework delivers next-generation network IPS that allow organizations to streamline security operations while dramatically reducing exposure to new attack types.

For more information about McAfee Network Security, please visit http://www.mcafee.com/next-generation-ips.

About McAfee

McAfee, a wholly owned subsidiary of Intel Corporation (NASDAQ:INTC), is the world's largest dedicated security technology company. McAfee delivers proactive and proven solutions and services that help secure systems, networks, and mobile devices around the world, allowing users to safely connect to the Internet, browse and shop the Web more securely. Backed by its unrivaled Global Threat Intelligence, McAfee creates innovative products that empower home users, businesses, the public sector and service providers by enabling them to prove compliance with regulations, protect data, prevent disruptions, identify vulnerabilities, and continuously monitor and improve their security. McAfee is relentlessly focused on constantly finding new ways to keep our customers safe. http://www.mcafee.com

1 Gartner, Inc., "Defining Next-Generation Network Intrusion Prevention," by John Pescatore and Greg Young, Oct 7, 2011.

Note: McAfee and McAfee Global Threat Intelligence are trademarks or registered trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other names and brands may be claimed as the property of others.

McAfee
Erica Coleman, 408-346-5624
erica_coleman@mcafee.com
or
H3O Communications
Heather Edell, 415-618-8814
heather@h3ocommunications.com