McAfee QUICKCLEAN 3.0 User's Guide download pdf (Page 15)

• It is an on-premises solution that has access to cloud-based GTI. In addition, you can integrate it

with other McAfee's security products.

• McAfee Advanced Threat Defense does not sniff or tap into your network traffic. It analyzes the

files submitted to it for malware. This means that you can place the McAfee Advanced Threat

Defense Appliance anywhere in your network as long as it is reachable to all the integrated McAfee

products. It is also possible for one McAfee Advanced Threat Defense Appliance to cater to all such

integrated products (assuming the number of files submitted is within the supported level). This

design can make it a cost-effective and scalable anti-malware solution.

• McAfee Advanced Threat Defense is not an inline device. It can receive files from IPS Sensors for

malware analysis. So, it is possible to deploy McAfee Advanced Threat Defense in such a way that

you obtain the advantages of an inline anti-malware solution but without the associated drawbacks.

• Android is currently one of the top targets for malware developers. With this integration, the

Android-based handheld devices on your network are also protected. You can dynamically analyze

the files downloaded by your Android devices such as smartphones and tablets.

• Files are concurrently analyzed by various engines. So, it is possible for known malware to be

blocked in almost real time.

• When McAfee Advanced Threat Defense dynamically analyzes a file, it selects the analyzer virtual

machine that uses the same operating system and other applications as that of the target host.

This is achieved through its integration with McAfee ePO or through passive device profiling feature

of Network Security Platform. This enables you to identify the exact impact on a targeted host, so

that you can take the required remedial measures. This also means that McAfee Advanced Threat

Defense executes the file only the required virtual machine, reserving its resources for other files.

• Consider a host downloaded a zero-day malware, but a Sensor that detected this file downloaded

submitted it to McAfee Advanced Threat Defense. After a dynamic analysis, McAfee Advanced

Threat Defense determines the file to be malicious. Based on how you have configured the

Advanced Malware policy, it is possible for the Manager to add this malware to the blacklist of all

the Sensors in your organization's network. This file also might be on the blacklist of McAfee

Advanced Threat Defense. Thus, the chances of the same file re-entering your network is reduced.

• Even the first time when a zero-day malware is downloaded, you can contain it by quarantining the

affected hosts until they are cleaned and remediated.

Malware detection and McAfee

Advanced Threat Defense

The McAfee Advanced Threat Defense solution

McAfee Advanced Threat Defense 3.0.4 Product Guide

1 2 ... 10 11 12 13 14 15 16 17 18 19 20 ... 139 140

No comments

McAfee QUICKCLEAN 3.0 User's Guide Page 15