McAfee Change Control
Continuous change policy enforcement and file integrity monitoring

Features & Benefits:

Implement continuous file integrity monitoring
Comply with PCI DSS requirements with the Change Control File Integrity Monitoring (FIM) software, and continuously track changes to file and registry keys and identify who made changes to which files.

Block unwanted changes in your server environment
Protect critical system files, directories, and configurations from tampering with Change Control’s Change Prevention software. No changes to the server environment are permitted unless they are in accordance with set policies.

Gain control from a single console
Use Change Reconciliation software (optional) to integrate Change Control with enterprise management systems through McAfee ePolicy Orchestrator (McAfee ePO) software. Change Reconciliation software includes single-click integration with BMC Remedy.

Leverage small footprint and operational overhead
Enjoy negligible impact on server performance. Memory usage is low, there is no file scanning to affect system performance, the software is easy to set up, and its operational overhead is minimal.

Key Features

• File integrity monitoring—Continuously tracks changes to file and registry keys and identifies who made changes to which files.
• Change prevention—Protects critical files and registry keys from tampering, with changes only permitted in accordance with update policies.

System Requirements:

Microsoft Windows (32-bit and 64-bit)

• Embedded: XPE, 7E, WEPOS, POS Ready 2009, WES 2009
• Server: NT, 2000, 2003, 2003 R2, 2008, 2008 R2, 2012
• Desktop: XP, Vista, 7

Linux

• RHEL 5, 6
• SUSE 10, 11
• CentOS 5, 6
• OEL 5,6
• SLED 11
• OpenSUSE 10/11
• Solaris 9, 10

AIX

• AIX 6.1, 7.1
• Solaris 9, 10

Solutions:

McAfee Change Control software eliminates change activity—which is far too common in enterprises today. Change activity can lead to security breaches, data loss, and outages. Featuring file integrity monitoring, and change prevention, McAfee Change Control enforces change policies and provides continuous monitoring of critical systems. It also detects changes made across distributed and remote locations and blocks unwanted changes.

With its intuitive search interface, McAfee Change Control helps users quickly home in on change event information. For example, you can query the interface for data on all changes that occurred in the c:\windows\system32 directory that were made on the server xyz.acme.com.

Next-Level File Integrity Monitoring

PCI DSS Requirements 10 and 11.5 call for tracking and monitoring all access to network resources and cardholder data and deploying file integrity monitoring (FIM) tools to alert personnel to unauthorized modifications of critical system, configuration, or content files. McAfee Change Control enables you to implement real-time FIM software and validate PCI compliance in an efficient, cost-effective manner. McAfee Change Control FIM provides the who, when, what, and why essentials. It gives you the user name, time of change, program name, and file/registry content data all in one place and in real time. In addition, it can help you identify root causes when troubleshooting in the event of an outage.

Track Content Changes

McAfee Change Control allows you to track file content and attribute changes. File content changes can be viewed and compared side by side to see what was added, deleted, or modified. This is handy while troubleshooting configuration-related outages.

Include/exclude filters can be configured so that only relevant, actionable changes are captured. What’s more, special alerting mechanisms instantly notify you of critical changes, so you can prevent configuration-related outages—a recommended information technology infrastructure library (ITIL) best practice. Qualified security assessor (QSA) forms are provided for easy PCI reporting.

McAfee Change Control features out-of-the-box FIM rules and sophisticated filters for monitoring only relevant files.

Prevent Outages Resulting from Unplanned Changes

McAfee Change Control allows IT to easily resolve incidents, automate regulatory compliance controls, and prevent change-related outages. Additionally, McAfee Change Control eliminates the need for manual, error-prone, and resource-intensive compliance policies that are often associated with Sarbanes-Oxley (SOX) mandates. McAfee Change Control enables you to build an automated IT control framework in which all the information required to verify compliance is available in a single reporting system. Changes against authorizations can be validated automatically. Emergency fixes and other out-of-process changes are automatically documented and reconciled for easier audits.

Centralized Security and Compliance Management

McAfee ePO software consolidates and centralizes management, providing a global view of enterprise security. It gives you the flexibility to adjust the types or scope of systems to cover and lets you determine which files, directories, and configurations should be included in change alerts, as well as the priority of alerts. Default profiles developed for most common types of server operating systems and enterprise applications are available to monitor for critical components without creating new ones from scratch. With McAfee Change Control and McAfee ePO software, new profiles can be activated at any point in time to increase protection—from simple monitoring to bulletproof enforcement.

McAfee ePO software is scalable and readily extensible. It integrates McAfee Change Control software and other McAfee security management products with those of McAfee Security Innovation Alliance Partners.

Enforcement Changes Everything

McAfee Change Control software tracks and validates every attempted change in real time on your server. It enforces change policies by requiring that changes be made within a time window, only by trusted sources, or with approved work tickets. The change prevention component of McAfee Change Control software can be finetuned to allow native applications to update their files continuously without interruption, while disallowing all other applications or users from making changes or even reading specified files.

Minimizing Risk and Maximizing Compliance on Multiple Fronts

McAfee offers a wide array of risk and compliance solutions to help you minimize risk, automate compliance, and optimize security. In particular, McAfee Change Control and McAfee Application Control are a powerful combination for eliminating vulnerabilities and ensuring compliance throughout the enterprise.

Next Steps

McAfee Change Control software eliminates change activity in server environments that can lead to security breaches, data loss, and outages and makes it easy to meet regulatory compliance requirements. Prevent unauthorized changes while automating regulatory compliance controls with McAfee Change Control today.

Small Footprint and Low Overhead

• Easy setup and low initial and ongoing operational overhead.
• Negligible memory usage.
• No file scanning that could impact system performance.

Documentation:

Download the McAfee Change Control Solutions Datasheet (PDF).