McAfee IntruShield NTBA Software T500 v6.0.1.52
- نسخه :Version 6.0.1.52
- نوع فایل : نرم افزار
- زبان : انگلیسی
- سیستم عامل : Windows 32Bit & 64Bit
- تولید کننده : McAfee
- سال تولید : 2009
Description
This document will walk through a basic setup and integration of the McAfee Network Threat Behavioral
Analysis appliance with the McAFee Network Security Platform. Each NSP licence includes a free instance
of a virtual NTBA appliance. This document will explain the install and integration process to receive
enhanced detection capabilities on the NSP, including use of the McAfee Endpoint Intelligence Agent.
What is Network Threat Behavioral Analysis?
The McAfee NTBA Appliance is a feature-rich, non-intrusive solution for monitoring network traffic by
analyzing flow information flowing through network in real time. The NTBA Appliance complements the
IPS capabilities in a scenario where Network Security Platform IPS Sensors and NTBA Appliances are
installed and managed through the McAfee® Network Security Manager (Manager).
The NTBA Appliance gathers flow information from across users, applications, endpoints, network
devices, and stores them in an embedded database. You can see real-time data and a moving profile
of applications, endpoints, zones, and interface traffic. The NTBA Appliance provides a graphic
configurable real-time view of the network traffic.
Threat-related events such as endpoint scans, port scans, worm attacks, new service / application,
new endpoint, suspicious connection, DoS, P2P, and spambots can be tracked based on user-defined
policies. All this information is coalesced into a summary view in the Threat Analyzer of the Manager
that can be drilled down for detailed information.
Analysis appliance with the McAFee Network Security Platform. Each NSP licence includes a free instance
of a virtual NTBA appliance. This document will explain the install and integration process to receive
enhanced detection capabilities on the NSP, including use of the McAfee Endpoint Intelligence Agent.
What is Network Threat Behavioral Analysis?
The McAfee NTBA Appliance is a feature-rich, non-intrusive solution for monitoring network traffic by
analyzing flow information flowing through network in real time. The NTBA Appliance complements the
IPS capabilities in a scenario where Network Security Platform IPS Sensors and NTBA Appliances are
installed and managed through the McAfee® Network Security Manager (Manager).
The NTBA Appliance gathers flow information from across users, applications, endpoints, network
devices, and stores them in an embedded database. You can see real-time data and a moving profile
of applications, endpoints, zones, and interface traffic. The NTBA Appliance provides a graphic
configurable real-time view of the network traffic.
Threat-related events such as endpoint scans, port scans, worm attacks, new service / application,
new endpoint, suspicious connection, DoS, P2P, and spambots can be tracked based on user-defined
policies. All this information is coalesced into a summary view in the Threat Analyzer of the Manager
that can be drilled down for detailed information.
