McAFEE AND McAFEE PARTNER USE
McAfee MVISION
Security Management
Simplify. Accelerate. Orchestrate.
Jorge Ernesto Sánchez Andrade | SE Perú & Bolivia
2McAFEE AND McAFEE PARTNER USE
New strategic charter and turning point for the McAfee portfolio focuses on making
our products simpler to deploy and use, and even more interoperable with third-party
solutions and multiple platforms
https://www.mcafee.com/enterprise/en-us/solutions/mvision.html
3McAFEE AND McAFEE PARTNER USE
Cloud-Native
Insight-Driven
Open Architecture
The first cloud-based product family that protects
data and stops threats across devices, networks,
clouds (IaaS, PaaS, and SaaS), and on-premises
environments.
#ProtectionPeru2019
4McAFEE AND McAFEE PARTNER USE
Simple
Modern SaaS infrastructure, streamlined workspaces
and consolidated policies
Flexible
Incorporate existing investments
including native and 3rd-party controls
Comprehensive
Defend your diverse ecosystem and
drill-down into contextual insights
Fast
Accomplish more with less effort through tactical
automation and AI guidance
Clarity to act. Simplicity to execute.
Devices Cloud
Clarity to act
Control where it matters most
SOC
Simplicity to execute
5McAFEE AND McAFEE PARTNER USE
MVISION ePO
A dramatically simple cloud-based SaaS
management service.
MVISION Endpoint
Advanced augmented defense for Windows 10
with a unified management experience.
MVISION EDR
Powerful threat detection, investigation, and
response – simplified.
MVISION Cloud
Cloud-Native Data and Application Security
Across SaaS, IaaS, and PaaS.
MVISION Mobile
Centrally manage and defend IOS and Android just
like any other device.
6McAFEE AND McAFEE PARTNER USE
DRAMATICALLY SIMPLE
• Zero Deployment
• Up in minutes, migrate in days
• Continuous updates
• Enhanced customer
experience
• New security posture
dashboard
COMPREHENSIVE DEVICE SECURITY
• Concentrate on
critical security
• McAfee Device Security
• McAfee MVISION Endpoint or ENS
• Augment Windows
Defender
#ProtectionPeru2019
7McAFEE AND McAFEE PARTNER USE
Over 74% of F100 using ePO with over 60M nodes
Proven advanced security management
OPEN EXTENSIBLE PLATFORMAUTOMATED RESPONSE AND
REMEDIATION
INTEGRATED PANE OF
GLASS
McAfee MVISION ePO
7McAFEE AND McAFEE PARTNER USE
Cloud Deployment Options
#ProtectionPeru2019
8McAFEE AND McAFEE PARTNER USE
Easy to Use, Intuitive Management Dashboard
Easily navigate to urgent
needs
Get details on threats, your security
posture, processes, devices and actions
taken
9McAFEE AND McAFEE PARTNER USE
Single
Management ExperienceMcAfee Advanced Protection
Machine learning
Fileless defense
Rollback
Windows 10
Anti-Malware, Exploit
Guard and Firewall
+ THEIRS
Why McAfee MVISION Endpoint?
I need to augment my Microsoft investment, but I don’t want additional security consoles.
Fast, simple deployment | No additional complexity | Superior security posture
OURS = YOURS
10McAFEE AND McAFEE PARTNER USE
The Benefits of Native Security
Why adoption is increasing
Signature-based defenses within the Operating System offload the need for a
solution to protect against known threats
As part of an existing investment, time and money can be
saved by leveraging them
The impact to networks and bandwidth can be
reduced with less frequent updates
Minimal impact to users and productivity
11McAFEE AND McAFEE PARTNER USE
A Way to Effectively Leverage Native Security is Missing
No converged management for native
and advanced defenses
Multiple products,
vendors, management tools
and software bloat
Limited to no options for integrating third
parties
Manual maintenance
and patching
How many hours a week would you save with consolidated management?
#ProtectionPeru2019
12McAFEE AND McAFEE PARTNER USE
What can MVISION Endpoint do for you?
Centralize management
across your entire environment
Speed up remediation with a
simplified, contextual user interface
Leverage your existing investment,
improve your TCO
Save time with simplified, cohesive
policy management
Low impact, balanced performance for your users
13McAFEE AND McAFEE PARTNER USE
Centralized Management
McAfee
Advanced
Protection
Traditional
Native
Security
Windows Defender*
McAfee MVISION Endpoint
Reduced Complexity = Reduced TCO
Always Up-to-date Security
Regular Automatic updates
Single Threat Protection Policy
Optimized, Rationalized and Unified
Simplified UX
Fewer Clicks, Outcome visibility
Lightweight security
Up to 75% Smaller footprint
On-Prem | On AWS | Multi-tenant SaaS
Lightweight Common Agent
Antivirus Firewall Exploit Guard
Machine
Learning
Reputation/Script
Scanning
Credential Theft
Prevention
Remediation
14McAFEE AND McAFEE PARTNER USE
McAfee enables organizations to accelerate their
business by giving them total control over their data
in the cloud
Gain complete visibility into data, context, and user
behavior across all cloud services, users, and devices
Take real-time action to enforce policies across cloud
services and apply persistent data protection
Remediate security threats by eliminating security
misconfigurations and correcting high-risk user
activities.
15McAFEE AND McAFEE PARTNER USE
Network security fails to protect data in the cloud & mobile era
Data created natively in
cloud is invisible to network
security
Data uploaded to cloud from
mobile is invisible to network
security
50% of cloud traffic is cloud-to-
cloud and invisible to network
security
16McAFEE AND McAFEE PARTNER USE
McAfee MVISION Cloud Architecture
Ground Link
Sky Gateway
Email Mode
Sky Gateway
Universal Mode
Lightning Link
Sky Link
17McAFEE AND McAFEE PARTNER USE
Enforce data loss prevention (DLP) policies
across data in the cloud
Prevent unauthorized sharing of sensitive data
with the wrong people
Block sync/download of corporate data to
personal devices
Detect compromised accounts, insider threats,
and malware
Encrypt cloud data with encryption keys that
only you control
Audit and tighten the security settings of cloud
services
Understand cloud services in use and their risk
profile
18McAFEE AND McAFEE PARTNER USE
Detection engine uses machine learning and behavioral analysis to provide real-time, on-device
protection against both known and unknown threats
Device Attacks Network Attacks Application Attacks
19McAFEE AND McAFEE PARTNER USE
Our Digital Life
Personal Life Work Life
20McAFEE AND McAFEE PARTNER USE
Mobile Threats are Real
In 2017, Apple and Google released record number of security patches1
Two-thirds of mobile devices are running vulnerable operating systems2
10% of devices have experienced “man-in-the-middle” attacks3
By 2019, mobile malware will amount to 1/3 of total malware2
1 CVE.Mitre.org. CVEDetails.com: Android and iOS CVEs
2 Zimperium Global Threat Intelligence, 3Q 2017
3 Market Guide for Mobile Threat Defense Solutions, Gartner, 22 August 2017, ID: G00314969
21McAFEE AND McAFEE PARTNER USE
MVISION Mobile Protection
Proactive Threat Detection
Automated Risk & Vulnerability
Assessment
DEVICE
OS Exploit Detection
Device Forensics
USB Exploit Detection
Vulnerability & Risk
APPLICATION
Malware Detection
App Risk Analysis
App Privacy Analysis
App Forensic Reports
NETWORK
Reconnaissance Scans
Man-in-the-Middle Attacks
SSL Decryption / Stripping
Rogue Access Points
Unsecured WiFi
Proactive warning of previously
attacked networks
22McAFEE AND McAFEE PARTNER USE
MVISION Mobile Solution Overview
MVISION Mobile Console
MVISION ePolicy Orchestrator
MVISION Mobile AppMDM/EMM Console
23McAFEE AND McAFEE PARTNER USE
MVISION Mobile ePO Integration
Compliance Reporting
• Mobile Threat Data
• Threat Event Details
• Most Attacked Networks
• Risk Management
• Device Information
• OS Distribution
• MVISION Version
• Vulnerable OS
• Upgradeable OS
• Non-Upgradeable OS
24McAFEE AND McAFEE PARTNER USE
Do more with existing staff by reducing the expertise and effort
needed to perform investigations
Detect& act on advanced threats faster to stop breaches and
improve security posture
Respond with speed using one console, single-click containment and
ecosystem integration
25McAFEE AND McAFEE PARTNER USE
What is MVISION EDR?
McAfee Active Response
Endpoint visibility and data
collection
Suspicious behavior
detection
Fast search
Robust response
McAfee Investigator
Dynamic Investigation
Guides
Automated Analysis
Enterprise-wide data
collection
Enhancements
Simplified, cloud-centric
architecture
Extended data collection
and retention
MITRE ATT&CK™
framework driven
identification and mapping
MVISION EDR
Powerful threat detection,
investigation, and response
- simplified
26McAFEE AND McAFEE PARTNER USE
27McAFEE AND McAFEE PARTNER USE
Detect Threats and Act Faster
 Detection based on and mapped to the MITRE ATT&CK™
framework
 Faster, consistent process to determine phase of a threat, associated
risk, and response priority
 Alert ranking speeds triage by helping analysts understand risk
severity
 Data visualization helps analysts quickly understand why an alert was
raised and determine next steps: dismiss, respond, investigate.
 Behavior-based
 File-based and fileless threats
 Prevalence
 Rapid adoption of new analytics engines and techniques
Response
MVISION EDR
Endpoint
Continuous
monitoring
28McAFEE AND McAFEE PARTNER USE
McAfee’s Approach to EDR
Faster resolution with higher fidelity
Respond
Validate
High Confidence
Gather Data / Assess / Scope
Dynamic, Guided
Investigation
Alert
Analytics
Data/Context
Data
Hunting
29McAFEE AND McAFEE PARTNER USE
Do More with Existing Staff
Expert system dynamically guides investigation
Surface Findings
Automatically gather, summarize, and
visualize evidence from multiple sources.
Automatically ask and answer questions
to prove or disprove the hypotheses.
Dynamically adjust to case at hand,
combine different strategies and data.
Explore many hypotheses in parallel for
maximum speed and accuracy.
Faster resolution with higher fidelity
30McAFEE AND McAFEE PARTNER USE
Respond with Speed
Increase efficiency with a single workspace for entire the
process: detection-investigation-response
Quickly take action at scale with a clear understanding of the threat
Integration optimizes security operationsworkflow
#ProtectionPeru2019
McAfee, the McAfee logo, ePolicy Orchestrator and ePO are trademarks or registered trademarks of McAfee, LLC or its subsidiaries in the US and other countries.
Other marks and brands may be claimed as the property of others.
Copyright © 2018 McAfee, LLC.
#ProtectionPeru2019

Cloud Security Strategy by McAfee

  • 1.
    McAFEE AND McAFEEPARTNER USE McAfee MVISION Security Management Simplify. Accelerate. Orchestrate. Jorge Ernesto Sánchez Andrade | SE Perú & Bolivia
  • 2.
    2McAFEE AND McAFEEPARTNER USE New strategic charter and turning point for the McAfee portfolio focuses on making our products simpler to deploy and use, and even more interoperable with third-party solutions and multiple platforms https://www.mcafee.com/enterprise/en-us/solutions/mvision.html
  • 3.
    3McAFEE AND McAFEEPARTNER USE Cloud-Native Insight-Driven Open Architecture The first cloud-based product family that protects data and stops threats across devices, networks, clouds (IaaS, PaaS, and SaaS), and on-premises environments. #ProtectionPeru2019
  • 4.
    4McAFEE AND McAFEEPARTNER USE Simple Modern SaaS infrastructure, streamlined workspaces and consolidated policies Flexible Incorporate existing investments including native and 3rd-party controls Comprehensive Defend your diverse ecosystem and drill-down into contextual insights Fast Accomplish more with less effort through tactical automation and AI guidance Clarity to act. Simplicity to execute. Devices Cloud Clarity to act Control where it matters most SOC Simplicity to execute
  • 5.
    5McAFEE AND McAFEEPARTNER USE MVISION ePO A dramatically simple cloud-based SaaS management service. MVISION Endpoint Advanced augmented defense for Windows 10 with a unified management experience. MVISION EDR Powerful threat detection, investigation, and response – simplified. MVISION Cloud Cloud-Native Data and Application Security Across SaaS, IaaS, and PaaS. MVISION Mobile Centrally manage and defend IOS and Android just like any other device.
  • 6.
    6McAFEE AND McAFEEPARTNER USE DRAMATICALLY SIMPLE • Zero Deployment • Up in minutes, migrate in days • Continuous updates • Enhanced customer experience • New security posture dashboard COMPREHENSIVE DEVICE SECURITY • Concentrate on critical security • McAfee Device Security • McAfee MVISION Endpoint or ENS • Augment Windows Defender #ProtectionPeru2019
  • 7.
    7McAFEE AND McAFEEPARTNER USE Over 74% of F100 using ePO with over 60M nodes Proven advanced security management OPEN EXTENSIBLE PLATFORMAUTOMATED RESPONSE AND REMEDIATION INTEGRATED PANE OF GLASS McAfee MVISION ePO 7McAFEE AND McAFEE PARTNER USE Cloud Deployment Options #ProtectionPeru2019
  • 8.
    8McAFEE AND McAFEEPARTNER USE Easy to Use, Intuitive Management Dashboard Easily navigate to urgent needs Get details on threats, your security posture, processes, devices and actions taken
  • 9.
    9McAFEE AND McAFEEPARTNER USE Single Management ExperienceMcAfee Advanced Protection Machine learning Fileless defense Rollback Windows 10 Anti-Malware, Exploit Guard and Firewall + THEIRS Why McAfee MVISION Endpoint? I need to augment my Microsoft investment, but I don’t want additional security consoles. Fast, simple deployment | No additional complexity | Superior security posture OURS = YOURS
  • 10.
    10McAFEE AND McAFEEPARTNER USE The Benefits of Native Security Why adoption is increasing Signature-based defenses within the Operating System offload the need for a solution to protect against known threats As part of an existing investment, time and money can be saved by leveraging them The impact to networks and bandwidth can be reduced with less frequent updates Minimal impact to users and productivity
  • 11.
    11McAFEE AND McAFEEPARTNER USE A Way to Effectively Leverage Native Security is Missing No converged management for native and advanced defenses Multiple products, vendors, management tools and software bloat Limited to no options for integrating third parties Manual maintenance and patching How many hours a week would you save with consolidated management? #ProtectionPeru2019
  • 12.
    12McAFEE AND McAFEEPARTNER USE What can MVISION Endpoint do for you? Centralize management across your entire environment Speed up remediation with a simplified, contextual user interface Leverage your existing investment, improve your TCO Save time with simplified, cohesive policy management Low impact, balanced performance for your users
  • 13.
    13McAFEE AND McAFEEPARTNER USE Centralized Management McAfee Advanced Protection Traditional Native Security Windows Defender* McAfee MVISION Endpoint Reduced Complexity = Reduced TCO Always Up-to-date Security Regular Automatic updates Single Threat Protection Policy Optimized, Rationalized and Unified Simplified UX Fewer Clicks, Outcome visibility Lightweight security Up to 75% Smaller footprint On-Prem | On AWS | Multi-tenant SaaS Lightweight Common Agent Antivirus Firewall Exploit Guard Machine Learning Reputation/Script Scanning Credential Theft Prevention Remediation
  • 14.
    14McAFEE AND McAFEEPARTNER USE McAfee enables organizations to accelerate their business by giving them total control over their data in the cloud Gain complete visibility into data, context, and user behavior across all cloud services, users, and devices Take real-time action to enforce policies across cloud services and apply persistent data protection Remediate security threats by eliminating security misconfigurations and correcting high-risk user activities.
  • 15.
    15McAFEE AND McAFEEPARTNER USE Network security fails to protect data in the cloud & mobile era Data created natively in cloud is invisible to network security Data uploaded to cloud from mobile is invisible to network security 50% of cloud traffic is cloud-to- cloud and invisible to network security
  • 16.
    16McAFEE AND McAFEEPARTNER USE McAfee MVISION Cloud Architecture Ground Link Sky Gateway Email Mode Sky Gateway Universal Mode Lightning Link Sky Link
  • 17.
    17McAFEE AND McAFEEPARTNER USE Enforce data loss prevention (DLP) policies across data in the cloud Prevent unauthorized sharing of sensitive data with the wrong people Block sync/download of corporate data to personal devices Detect compromised accounts, insider threats, and malware Encrypt cloud data with encryption keys that only you control Audit and tighten the security settings of cloud services Understand cloud services in use and their risk profile
  • 18.
    18McAFEE AND McAFEEPARTNER USE Detection engine uses machine learning and behavioral analysis to provide real-time, on-device protection against both known and unknown threats Device Attacks Network Attacks Application Attacks
  • 19.
    19McAFEE AND McAFEEPARTNER USE Our Digital Life Personal Life Work Life
  • 20.
    20McAFEE AND McAFEEPARTNER USE Mobile Threats are Real In 2017, Apple and Google released record number of security patches1 Two-thirds of mobile devices are running vulnerable operating systems2 10% of devices have experienced “man-in-the-middle” attacks3 By 2019, mobile malware will amount to 1/3 of total malware2 1 CVE.Mitre.org. CVEDetails.com: Android and iOS CVEs 2 Zimperium Global Threat Intelligence, 3Q 2017 3 Market Guide for Mobile Threat Defense Solutions, Gartner, 22 August 2017, ID: G00314969
  • 21.
    21McAFEE AND McAFEEPARTNER USE MVISION Mobile Protection Proactive Threat Detection Automated Risk & Vulnerability Assessment DEVICE OS Exploit Detection Device Forensics USB Exploit Detection Vulnerability & Risk APPLICATION Malware Detection App Risk Analysis App Privacy Analysis App Forensic Reports NETWORK Reconnaissance Scans Man-in-the-Middle Attacks SSL Decryption / Stripping Rogue Access Points Unsecured WiFi Proactive warning of previously attacked networks
  • 22.
    22McAFEE AND McAFEEPARTNER USE MVISION Mobile Solution Overview MVISION Mobile Console MVISION ePolicy Orchestrator MVISION Mobile AppMDM/EMM Console
  • 23.
    23McAFEE AND McAFEEPARTNER USE MVISION Mobile ePO Integration Compliance Reporting • Mobile Threat Data • Threat Event Details • Most Attacked Networks • Risk Management • Device Information • OS Distribution • MVISION Version • Vulnerable OS • Upgradeable OS • Non-Upgradeable OS
  • 24.
    24McAFEE AND McAFEEPARTNER USE Do more with existing staff by reducing the expertise and effort needed to perform investigations Detect& act on advanced threats faster to stop breaches and improve security posture Respond with speed using one console, single-click containment and ecosystem integration
  • 25.
    25McAFEE AND McAFEEPARTNER USE What is MVISION EDR? McAfee Active Response Endpoint visibility and data collection Suspicious behavior detection Fast search Robust response McAfee Investigator Dynamic Investigation Guides Automated Analysis Enterprise-wide data collection Enhancements Simplified, cloud-centric architecture Extended data collection and retention MITRE ATT&CK™ framework driven identification and mapping MVISION EDR Powerful threat detection, investigation, and response - simplified
  • 26.
  • 27.
    27McAFEE AND McAFEEPARTNER USE Detect Threats and Act Faster  Detection based on and mapped to the MITRE ATT&CK™ framework  Faster, consistent process to determine phase of a threat, associated risk, and response priority  Alert ranking speeds triage by helping analysts understand risk severity  Data visualization helps analysts quickly understand why an alert was raised and determine next steps: dismiss, respond, investigate.  Behavior-based  File-based and fileless threats  Prevalence  Rapid adoption of new analytics engines and techniques Response MVISION EDR Endpoint Continuous monitoring
  • 28.
    28McAFEE AND McAFEEPARTNER USE McAfee’s Approach to EDR Faster resolution with higher fidelity Respond Validate High Confidence Gather Data / Assess / Scope Dynamic, Guided Investigation Alert Analytics Data/Context Data Hunting
  • 29.
    29McAFEE AND McAFEEPARTNER USE Do More with Existing Staff Expert system dynamically guides investigation Surface Findings Automatically gather, summarize, and visualize evidence from multiple sources. Automatically ask and answer questions to prove or disprove the hypotheses. Dynamically adjust to case at hand, combine different strategies and data. Explore many hypotheses in parallel for maximum speed and accuracy. Faster resolution with higher fidelity
  • 30.
    30McAFEE AND McAFEEPARTNER USE Respond with Speed Increase efficiency with a single workspace for entire the process: detection-investigation-response Quickly take action at scale with a clear understanding of the threat Integration optimizes security operationsworkflow #ProtectionPeru2019
  • 31.
    McAfee, the McAfeelogo, ePolicy Orchestrator and ePO are trademarks or registered trademarks of McAfee, LLC or its subsidiaries in the US and other countries. Other marks and brands may be claimed as the property of others. Copyright © 2018 McAfee, LLC. #ProtectionPeru2019