Event Analysis and Reporting
Administrators use McAfee Firewall Enterprise
Proler daily to understand changing situations.
They turn to McAfee Firewall Reporter to see
the larger landscape of historical events and
aggregate data for audit and compliance activities.
Viewed within McAfee Firewall Enterprise McAfee
Firewall Enterprise Control Center or from its
own web-based GUI, McAfee Firewall Reporter
centralizes audit streams, correlates alerts across
devices, handles the longer-term retention of
rewall audit data, and streamlines compliance.
Operator-focused reports
More than 550 reports cover all areas of the
rewall including application and user based
reports by geo-location, security zone, system
health, and many other areas that provide
comprehensive, device-specic information on
individual or groups of rewalls. Reports are
operator-focused to help you identify, investigate,
correct, and close any issue. Visibility helps
you secure the network, manage bandwidth
requirements, and ensure appropriate usage.
Identity and application-based reports unlock
the capabilities of your next-generation rewall,
augmenting existing regulatory reports. Historical
attack reports can show events categorized
by hour, day, week, month, quarter, or current
comparisons by each device, as well as across
alldevices.
Integrated and scalable
McAfee Firewall Reporter integrates with McAfee
Firewall Control Center and is included with
McAfee Firewall Enterprise. It scales to the largest
environments to generate a complete picture of
enterprise security events with no hours wasted in
manual analysis of individual device logs.
McAfee ePolicy Orchestrator
PlatformIntegration
Several McAfee rewall management tools
integrate with the McAfee ePO platform to help
network managers collaborate with enterprise
security administrators, helpdesk teams, and
auditors. For instance, the McAfee Firewall
Enterprise Proler sends trend and change data to
McAfee ePO software that can trigger a helpdesk
ticket. Integrations like these make it easier to
understand the context of events for faster
resolution and uncover the most pressing issues
that require intervention.
McAfee Firewall Enterprise McAfee Firewall
Enterprise Control Center, McAfee Firewall
Enterprise Proler, and McAfee ePO software can
correlate host and rewall health data within the
rewall management console. You can view top-
level data for multiple rewalls or drill down for
detailed data on a rewall or the McAfee Firewall
Enterprise Control Center or Proler appliance that
monitors it. McAfee Firewall Enterprise Proler can
obtain host information from an event’s drill down
to comprehend the situation more quickly.
Get Started
By integrating, automating, and centralizing
management activities throughout the rewall
management workow, McAfee offers crucial
tools that will help you extract the maximum
protection and compliance value out of your
rewall investment, with the minimum of time
and tedium. The McAfee rewall management
tools work together to maximize operational
efciency, simplify policy control, and demonstrate
regulatory compliance, while drivingdown
management costs. Learn more at
www.mcafee.com/rewall.
McAfee ePO platform integration
enables visibility into:
•
Firewall alerts.
•
Firewall health statistics.
•
Historical performance trends.
•
Tracking of version and
patchlevels.
•
Hosts and endpoints used
inpolicies.
•
Host prole information
directlyfrom analytical tools.
Comments to this Manuals