INFOSEC –McAfee
today announced ground-breaking situational awareness and accuracy for
Security Information and Event Management (SIEM). The introduction of McAfee
Enterprise Security Manager (formerly NitroView) expands SIEM from
simple event analysis to accurate and actionable information through the
integration of threat, user and countermeasure intelligence. The unique
McAfee "built for Big Security Data” SIEM, includes dynamic threat
visibility from McAfee Global Threat Intelligence, and countermeasure
awareness through McAfee ePolicy Orchestrator software and McAfee Risk
Advisor.
Next-Generation SIEM
McAfee Enterprise Security Manager provides meaningful intelligence and
takes SIEM to a real-time understanding of the global threat landscape
by delivering immediate information on events, users, systems, data,
risks, and countermeasures for accurate situational awareness. This rich
understanding of security - by connecting the dots and pinpointing
attacks - reduces time to respond and provides intelligently prioritized
security alerts.
The Big Data Challenge
Core to increasing situational awareness is the ability to collect,
maintain and intelligently process billions of relational data points
both historically and in real time. Unlike other SIEMs that are
struggling to keep up with exponentially increasing data flows, McAfee
Enterprise Security Manager has a scalable database that was built to
handle big security data. With this unique capability, the solution is
capable of not only processing billions of events per day, but
connecting those events with threat, countermeasure and user identity
information to provide accurate and actionable intelligence.
Security Connected
McAfee Enterprise Security Manager is an essential part of the McAfee
Security Connected framework allowing enterprises to connect all their
security-relevant data and enterprise security management solutions for
an unprecedented view of the enterprise. Two-way integration with McAfee
ePolicy Orchestrator software extends visibility and control across the
entire security and compliance environment. Integration with Global
Threat Intelligence from McAfee Labs provides the ability to correlate
real-world source reputation information with security events so
organizations can automatically pinpoint probing and active attacks and
immediately shut them down. Through integration with McAfee Risk
Advisor, McAfee Enterprise Security Manager leverages risk,
vulnerability and countermeasure context to provide the most accurate
risk score available – allowing enterprises to prioritize responses
based on the security posture of the target.
Open Framework
The Security Connected Reference Architecture is an open framework
supported by McAfee Enterprise Security Manager, providing an
easy-to-use GUI that allows for parsing of security data from custom
applications or other third-party sources. McAfee currently supports
over 300 security data sources as input into Enterprise Security
Manager. McAfee is committed to extending support for third party data
sources, having added 70 new sources since the NitroSecurity acquisition.
"Less than six months after acquisition we are already taking major
steps to advance situational awareness with our security management
solutions,” said Stuart McClure, worldwide chief technology officer and
general manager of the security management business unit at McAfee. "We
are committed to providing our customers with an open platform which is
critical for success in the SIEM space. McAfee customers receive the
most intelligent and fastest SIEM on the market and receive greater
value from the McAfee solutions they have already invested in.”
McAfee Enterprise Security Manager was honored with SC Magazine’s
coveted ‘SC Lab Approved’ label in its most recent SIEM
review. Also announced today was a report
from Pike Research on Governance, Risk Management and Compliance which
ranked McAfee as the top vendor.
Availability
The latest release of McAfee Enterprise Security Manager is expected to
be available mid-quarter, for more information visit http://www.mcafee.com/us/products/siem/index.aspx.
About McAfee
McAfee, a wholly owned subsidiary of Intel Corporation (NASDAQ:INTC), is
the world's largest dedicated security technology company. McAfee
delivers proactive and proven solutions and services that help secure
systems, networks, and mobile devices around the world, allowing users
to safely connect to the Internet, browse and shop the Web more
securely. Backed by its unrivaled Global Threat Intelligence, McAfee
creates innovative products that empower home users, businesses, the
public sector and service providers by enabling them to prove compliance
with regulations, protect data, prevent disruptions, identify
vulnerabilities, and continuously monitor and improve their security.
McAfee is relentlessly focused on constantly finding new ways to keep
our customers safe. http://www.mcafee.com
Note: McAfee and ePolicy Orchestrator are trademarks or registered
trademarks of McAfee, Inc. in the United States and other countries.
Other names and brands may be claimed as the property of others.
