Red Hat SYSTEM 8.0 - MIGRATION GUIDE 7.X TO 8.0 Przewodnik Instalacji Pobierz pdf (Strona 5)

Installing McAfee Host Intrusion Prevention

This guide provides all the information you need to install and start using Host Intrusion

Prevention 8.0 software in a managed environment. The product extension installs on versions

4.0, 4.5, and 4.6 of the ePolicy Orchestrator server. The client installs on Windows workstations

and servers and on Solaris and Linux servers.

Product features

Host Intrusion Prevention delivers a stateful endpoint firewall for Windows systems and a

manageable and scalable intrusion prevention solution for Windows and non-Windows

workstations, notebooks, and critical servers, including web and database servers. It blocks

unwanted or harmful network traffic and proactively blocks zero-day and known attacks with

patented, award-winning technology. Two versions of Host Intrusion Prevention 8.0 are available:

a firewall-only version and a full version containing both firewall and IPS protection.

Manageability and scalability

Host Intrusion Prevention is managed by ePolicy Orchestrator, which delivers and enforces its

policies along with other critical security solutions such as virus protection. This managed

approach decreases the amount of communication between applications and provides a single

solution with mass deployment — up to 100,000 client systems — in multiple languages across

an entire enterprise for complete global coverage.

Security

Host Intrusion Prevention combines behavioral rules, signatures, and a stateful system firewall

to block attacks and reduce the urgency of patches for new threats. You are protected with

default settings, which allow for a rapid, large-scale deployment. For greater protection, you

can apply stricter preset policies or custom policies.

The ePO database contains security content data, including signatures, which appears in Host

Intrusion Prevention policies. Updates are handled by a content update package, which contains

version information and updating scripts. At checkin, the package version is compared to the

most recent content in the database. If the package is newer, content data is extracted and

stored. This new content is then passed to clients at the next agent-server communication.

NOTE: Host Intrusion Prevention content updates are checked in manually or automatically

with a pull task to the ePO Repository, then distributed to clients with an update task. Host

Intrusion Prevention clients obtain updates only through communication with the ePO server.

How protection works

ePolicy Orchestrator communicates policy information to Host Intrusion Prevention clients at

regular intervals through the ePO agent. Host Intrusion Prevention clients enforce the policies,

5McAfee Host Intrusion Prevention 8.0 Installation Guide

1 2 3 4 5 6 7 8 9 10 ... 48 49

Brak uwag

Red Hat SYSTEM 8.0 - MIGRATION GUIDE 7.X TO 8.0 Przewodnik Instalacji Strona 5