McAfeeNSP入侵防御解决的方案.pptVIP

A Better Way 解决之道 Global Threat IntelligenceZero Day Response Environment Global Threat IntelligenceZero Day Response Environment McAfee 专业安全威胁研究团队 Zero-Day Attack Protection 零日攻击保护 McAfee NSP 核心功能 1. McAfee NSP是全球首款IPS产品，硬件平台成熟稳定： 最高处理性能高达10Gbps，NSS唯一认证的万兆平台； 成熟稳定的高端网络设备，稳定性高达(99.999%)； 支持Fail-Open、Fail-Over、二层通过等高可靠性机制； 在设备稳定性方面满足大型网络的要求，甚至超越其他网络设备。 2. NSP具有高级别的安全防御能力： 强大的特征检测机制，具备全球最大最全面的攻击特征库； 深度协议检测和异常分析，能够准确检测和阻断未知攻击行为； 智能的DoS/DDoS攻击防御模块； NSS测试中，威胁检出和阻断率高达99.4%。 3. NSP管理简便，部署灵活： 支持In-line、Span、Tap等多种部署模式； 管理平台直观，支持全简体中文报告和攻击事件描述。 * * * * * Transitioning to a proactive approach to security Industry Trends? Web 2.0 threats – real world examples today and what we do Artemis – as a proof point * By doing a simple right click within the NSP manager, you can get specific visibility to details of a source host or a destination host. You get visibility to things like the host name, username, current protection on that host, and the top 10 Host Intrusions events that have occurred on that host. This gives the Network Administrator direct, actionable information that was never available to a network admin before due to McAfee’s integration of NSP and ePO. Knowledge-Driven Network Security. Real-Time Security Confidence. Smart network and system security integration delivers real-time security that’s not just automated, but actionable. With the click of a mouse, you’ve got intelligent IPS that provides critical host details, top HIPS / Spyware attacks, and accurate threat risk relevance on demand. A real-time security solution empowers real-time security decisions, giving you a faster time to protection and confidence. Real-time intelligence. Real-time security action. Real-time relevancy, visibility and control capabilities empower efficient, real-time security decisions to give you faster time-to-protection and time-to-compliance. Security knowledge that’s actionable Integrated network and system security leverages all points of visibility—includ