McAfee QUICKCLEAN 3.0 User's Guide download pdf (Page 14)

• Integration with McAfee

Web Gateway — You can configure McAfee Advanced Threat Defense as

an additional engine for anti-malware protection. When your network user downloads a file, the

native McAfee Gateway Anti-malware Engine on McAfee

Web Gateway scans the file and

determines a malware score. Based on this score and the file type, McAfee

Web Gateway sends a

copy of the file to McAfee Advanced Threat Defense for deeper inspection and dynamic analysis. A

progress page informs your users that the requested file is being analyzed for malware. Based on

the malware severity level reported by McAfee Advanced Threat Defense, McAfee

Web Gateway

determines if the file is allowed or blocked. If it is blocked, the reasons are displayed for your

users. You can view the details of the malware that was detected in the log file.

Figure 1-4 Integration with McAfee

Web Gateway

This design ensures that only those files that require an in-depth analysis are sent to McAfee

Advanced Threat Defense. This balances your users' experience in terms of download speed and

security. For information on how to integrate McAfee Advanced Threat Defense and McAfee

Web

Gateway, see the McAfee

Web Gateway Product Guide, version 7.4.

• Integration with McAfee

ePolicy Orchestrator (McAfee ePO) — This integration enables McAfee

Advanced Threat Defense to retrieve information regarding the target host. Knowing the operating

system on the target host, enables it to select a similar virtual environment for dynamic analysis.

How the deployment options address the 4 major aspects of anti-malware process cycle:

• Detection of file download: As soon as a user accesses a file, the inline Network Security Platform

Sensor or McAfee

Web Gateway detects this and sends a copy of the file to McAfee Advanced

Threat Defense for analysis.

• Analysis of the file for malware: Even before the user fully downloads the file, McAfee Advanced

Threat Defense can detect a known malware using sources that are local to it or on the cloud.

• Block future downloads of the same file: Every time McAfee Advanced Threat Defense detects a

medium, high, or very high severity malware, it updates its local black list.

• Identify and remediate affected hosts: Integration with Network Security Platform enables you to

quarantine the host until it is cleaned up and remediated.

McAfee Advanced Threat Defense advantages

Here are some of the advantages that McAfee Advanced Threat Defense provides:

Malware detection and McAfee

Advanced Threat Defense

The McAfee Advanced Threat Defense solution

McAfee Advanced Threat Defense 3.0.4 Product Guide

1 2 ... 9 10 11 12 13 14 15 16 17 18 19 ... 139 140

No comments

McAfee QUICKCLEAN 3.0 User's Guide Page 14