Slide presentasi Pak Samuel H. Winata dari McAfee dalam seminar "Accelerating Cloud Computing Adoption".

1. Endpoint Protection as a
Service
Samuel H Winata
samuel_winata@mcafee.com
October 2017
1

2. The State of Enterprise
SecurityEmerging threats, manual processes and silos make breaches an unfortunate reality
2
70-90%
of malware samples detected
unique to organizations
they’re targeting
Ransomware creating
internal states of emerging
65%
of large organizations were
breached in the last 12 months
25%
experienced repeat incidents*
62%
of cases, attackers compromised
organizations within minutes**
On average, it takes
256 days
to identify a malicious attack
It takes an average of
8 days (64 hours)
for a security investigation
Organizations can be
38-100%
more effective if security teams
collaborate better
*UK Cyber Security Breach Survey, 2016 **Verizon Data Breach Report, 2015

3. Endpoint Customer Challenges
3
Detecting and
preventing
advanced threats
Accuracy
Causing manual
processes and
delaying responses
Complexity
Preventing deep
investigations to
aid in recovery
Visibility
Adding new
defenses in the
future increases
management
problems
Sustainabilit
y

4. What is Sentriciti EPaaS
The service ensures that the endpoints of security; the client devices,
are protected against advanced threats, keeping your network running
and corporate assets safe. With Datacomm “Endpoint as a Service”
solutions, you can protect your intellectual property, customer data,
and reputation.
You can also devote more IT resources to your core business.
Companies face attacks daily from competitors, criminals, and nation-
state entities who exploit all possible vulnerabilities to compromise
networks and access sensitive data. The real-time measurement and
monitoring of vulnerabilities and the threats is essential to stopping
these complex attacks. When combined with the ground breaking
machine-learning anti-virus the security of organizations endpoints is
dramatically increased.
4

5. Datacomm
Endpoint as a Services
5
Answer today’s needs
Integrated, Collaborative
Defenses
Contain and Unmask Advanced Threats A Sustainable, Extensible Framework
Remove security silos Stop zero-day threats Add new defenses easily

6. What Makes
Datacomm EPaaS
Different
6
True centralized
management
Extensible
endpoint security
framework
Actionable threat
forensics in
understandable
language
Integrated platform
that unites defenses
to work together
Advanced
capabilities like
machine learning
analysis of
sophisticated threats

7. 7
What Feature
Datacomm EPaaS
Desktop and Server Anti Virus
Email (outlook) Server Anti Virus
Desktop Firewall
Endpoint URL + Web Filtering
Device Control
Multiplatform AV (Linux/Unix/Mac)
Application Control for Desktops
Dynamic Application Containment*
Real Protect*

8. 8
• Detects Zero-Day Malware Pre-Execution
• Works in Presence of Block Protection as well as Offline
• Faster Response + Reduced need for human analysis
• Protect systems & data: 24x7 monitoring to alert you to threats before
damage is done
• Log management and retention for audit & compliance
• Reduce time to detection of breach
• Flexible support and pricing options
What Benefit
Datacomm EPaaS

9. Datacomm EPaaS Platform
A framework to simplify today, built with the future in mind
9
Security Management
McAfee ePO Agent Client UI
Threat
Prevention
Firewall Web
Control
Adaptive Threat
Protection
Kernel Mode Drivers – Network, File, Access Control, etc.Common Components – Logger, Scheduler, GTI, etc.

10. Datacomm EPaaS
Modules
10
ePO
Threat
Prevention
Web
Control
Firewall
Adaptive
Threat
Protection
Threat Prevention
On-Action Scan (OAS), On-Demand Scan
(ODS), Exploit Prevention, and Access
Protection
Firewall
Monitors network and Internet traffic
Web Control
Web filtering and browser protection
Adaptive Threat
Protection*
Dynamic Application Containment,
Real Protect

11. Datacomm EPaaS
Topology
11

12. Use Case
Download of a malicious file from the web
12
Client UI
TIE
Threat
Prevention
Web
Control
Firewall
ePO
• A file hash is sent from Web Control to
Threat Prevention, triggering an On-
Demand Scan (ODS)
• Malicious files are detected and
blocked before they have full access to
the system
• Forensics data is captured
(Source URL, file hash, etc.)
• Event data is shared with other
modules and ePO, and is visible in
client UI

13. Datacomm EPaaS
PackagesEssential and Advanced Threat Protection
13
Functionality
Essential
Threat Protection
Advanced
Threat Protection
Desktop and Server Anti Virus  
Email (outlook) Server Anti Virus  
Desktop Firewall  
Endpoint URL + Web Filtering  
Device Control  
Multiplatform AV (Linux/Unix/Mac)  
Application Control for Desktops  
Dynamic Application Containment*  
Real Protect*  
Price Agent Rp. XXX.000/month Rp. XXX.000/month

14. • Stronger zero-day threat detection using Static
and Dynamic machine learning analysis
• Thwarts spread of infections with Dynamic
Containment
• Easy, intuitive insights for corrective actions
• Centralized Management
• Delivers an architecture for the future
Advanced, Integrated Defenses;
Sustainable Framework for the Future
14
Summary
Learn more by visiting:
https://cloud.datacomm.co.id/services/endpoint-
protection