McAfee Server Security Suite Advanced
Advanced server security for physical, virtual, and cloud deployments with whitelisting

Features & Benefits:

Discover All Workloads

It is often a challenge to discover workloads so that you can apply the proper security policies across physical, virtual and cloud deployments. Through connectors into McAfee® ePolicy Orchestrator® (McAfee ePO™) software, McAfee Server Security Suite Advanced enables you to discover physical and virtual servers. In addition, with McAfee Data Center Connector for VMware vSphere, you get visibility into private cloud environments to see the ESXi to vCenter relationship, as well as determining the host on which a given machine is running. This enables you to monitor virtual machines so you can apply fine-grained policy management as a means of delivering a strong security posture across virtual machines.

Protect Servers

McAfee Server Security Suite Advanced adds McAfee Application Control, a whitelisting solution that allows only authorized software to run on system devices. Whitelisting significantly lowers host performance impact by protecting against zero-day and advanced persistent threats without signature updates.

The suite offers traditional anti-malware solutions for Microsoft Windows and Linux servers, including McAfee VirusScan® Enterprise, ranked number one by NSS Labs against zero-day exploits and evasion attacks. In addition to traditional anti-malware, the suite also offers a separate solution specialized for virtual environments. McAfee Management for Optimized Virtual Environments (MOVE) AntiVirus optimizes antivirus for those virtualized environments, minimizing performance impact and providing support for all major hypervisors.

Though antivirus is key to security, additional solutions may be necessary to protect against advanced threats. McAfee Host Intrusion Prevention safeguards business against complex security threats that may otherwise be unintentionally introduced or allowed. Moreover, Intel Trusted Execution Technology (TXT) attests that only trusted and certified applications are able to boot up. The Intel partnership also allows McAfee to offer hardware-assisted security for physical servers through McAfee Deep Defender, which goes below the operating system to address the most sophisticated attacks of both today and the future.

Expand into the Cloud

As you expand into the cloud, it is increasingly difficult to ensure that proper security policies are applied to newly provisioned workloads. McAfee addresses these challenges by automatically discovering virtual machines as they are provisioned in the private cloud with McAfee Data Center Connector for VMware vSphere, which can then be protected automatically with appropriate security policies. McAfee Data Center Connector for Amazon Web Services allows for visibility into these environments, easing concerns associated with the shift to the public cloud. You can register an Amazon Web Services account in McAfee ePO software and discover both running and stopped virtual machines. In addition, you can gain full visibility of protection status and security incidents in Amazon Web Services environments by deploying and configuring McAfee security solutions using the McAfee Data Center Security Dashboard.

Optimize Your Servers, Optimize Your Business

The enormous potential of virtualization and cloud computing can only be fully realized if they are sufficiently secured. McAfee provides server security solutions that support options for growthas organizations move forward. Whether physical, virtualized, or in the cloud, McAfee offers a suite of solutions to keep servers secure while maintaining flexibility. McAfee Server Security Suite Advanced delivers physical, virtual, and cloud server security with advanced solutions to establish and maintain a strong security posture across an organization.

Feature	Why You Need It
Whitelisting	Significantly lower host performance impact over traditional endpoint security controls. The industry’s strongest malware protection, which allows only authorized software to run on devices that use the solution.
File integrity	Prevents tampering by blocking unauthorized changes to critical system files, directories, and configurations. Tracks and validates every attempted change in real time on the server.
Single-console management	Single-pane management for physical and virtual servers, including those in the private and public cloud. Create a data center dashboard within McAfee ePO software.
Core server protection	A highly effective set of core antivirus technologies designed to block threats to servers. In addition, McAfee Host Intrusion Prevention safeguards businesses against complex security threats.
Virtualization security	Improve security of virtual workloads without compromising advantages of performance and resource utilization. Agentless and multiplatform deployment choices: Agentless deployment for VMware environments means no McAfee agents are installed in each virtual machine and no agent updates are needed; this reduces complexity and greatly improves usability. Multiplatform deployment for mixed-vendor virtualization environments (VMware, Citrix, and others). Use Intel TXT to verify that only trusted applications are referenced when booting VMware ESXi hypervisors on host servers for attestation.
Full visibility of virtual machines in the private and public cloud	Automatically discover virtual machines in the private cloud (VMware vSphere). View Amazon Web Services environments to expand visibility to the public cloud.
Hardware-assisted protection	Protection beyond the operating system provides significantly greater security coverage against the most advanced rootkits for physical servers. This was developed in concert with Intel to address the most sophisticated attacks, including stealth malware.

Core antivirus for physical servers
Deploy a highly effective set of core capabilities designed to block threats at the traditional endpoint. McAfee has earned a #1 ranking by NSS Labs against zero-day exploits and evasion attacks.

Optimized virtualization security
Get security optimized for virtualized environments, including your virtual machines in the cloud. McAfee Server Security Suite Advanced provides virus protection for virtual servers without compromising performance or security, helping you realize operational returns and more effective security management.

Full visibility of virtual machines
Discover not just physical servers but also hypervisors and virtual machines in both VMware vSphere and Amazon Web Services environments. Automatically discover when virtual machines are provisioned and automatically protect them with appropriate security policies.

Hardware-assisted security
Protect against the most advanced rootkits targeting physical servers. Our partnership with Intel allows McAfee to deliver hardware-assisted security and provide visibility into stealth malware infections — malware that is quietly spreading and evading current OS-based security solutions.

Host intrusion prevention
Safeguard against complex security threats that may otherwise be unintentionally introduced. Prevent intrusions, protect assets, and defend your company against known and emerging exploits, including zero-day attacks. With this stronger protection against exploits that target new vulnerabilities, your IT staff has more time for planning, testing, and deploying patches.

Block unauthorized applications
Allow only authorized software to run on devices and protect against zero-day exploits and advanced persistent threats (APTs) — without signature updates. McAfee Server Security Suite Advanced includes the industry’s strongest malware protection and significantly lowers host performance impact over traditional endpoint security controls.

Prevent unauthorized system changes
Provide continuous detection of system-level changes across distributed and remote locations, and prevent tampering by blocking unauthorized changes to critical system files, directories, and configurations. Track and validate every attempted change in real time on the server, enforcing change policy by a time window, source, or approved work ticket. This continuous control minimizes the impact from ad hoc or unauthorized changes.

Centralized management
Obtain single-pane manageability for physical and virtual servers, including those in the private and public cloud. The single-console environment provides comprehensive management for all McAfee server capabilities and lowers the total cost of ownership. All components of McAfee Server Security Suite Advanced are tightly integrated with the McAfee ePolicy Orchestrator (McAfee ePO) security management platform for efficiently, centralized risk assessment, security management, and incident resolution.

Documentation:

Download the McAfee Server Security Suite Advanced Datasheet (PDF).