McAfee Complete Data Protection Advanced
Comprehensive data protection anywhere, anytime

Features & Benefits:

Gain control over your data
Monitor and regulate how your employees access, use, and transfer data via common channels, such as email, IM, printing, and USB drives — both in and away from the office.

Protect devices with powerful data encryption
Prevent unauthorized system access and render sensitive data unreadable in the event of device loss or theft by implementing full-disk encryption and access control on all endpoint devices.

Ensure continual file and folder protection
Automatically and transparently encrypt files and folders on the fly — before they move through and outside your organization.

Extend the reach of IT
By communicating with endpoints at a level beyond the operating system, ePO Deep Command allows security administrators to configure and remediate hard-to-manage endpoints from a central site, using an established and familiar management platform — McAfee ePolicy Orchestrator.

Centralize and simplify your data security management
Use a single, centralized McAfee ePolicy Orchestrator (ePO) console to implement and enforce mandatory, company-wide security policies that control how data is encrypted, monitored, and protected from loss. Centrally define, deploy, manage, and update data security policies that encrypt, filter, monitor, and block unauthorized access to confidential data.

Prove compliance with advanced reporting and auditing capabilities
Monitor real-time events and generate detailed reports that show auditors, senior management, and other stakeholders your compliance with internal and regulatory privacy requirements.

Data Loss Prevention for Greater Control

Preventing data loss at the endpoint begins with improving visibility and control over your data, even when it is disguised. McAfee Complete Data Protection—Advanced enables you to implement and enforce company-wide security policies that regulate and restrict how your employees use and transfer sensitive data via common channels, such as email, IM, printing, and USB drives. It does not matter if they are in the office, at home, or on the move—you stay in control.

Enterprise­Grade Drive Encryption

Secure your confidential data with an enterprise-grade security solution that is FIPS 140-2 and Common Criteria EAL2+ certified for the Intel Advanced Encryption Standard—New Instructions (AES-NI) implementation. McAfee Complete Data Protection Suites use drive encryption combined with strong access control via two-factor pre-boot authentication to prevent unauthorized access to confidential data on endpoints, including desktops, laptops, USB drives, CD/DVDs, and more.

Persistent, Transparent Removable Media and File and Folder Encryption

Ensure that specific files and folders are always encrypted, regardless of where data is edited, copied, or saved. McAfee Complete Data Protection Suites feature content encryption that automatically and transparently encrypts the files and folders you choose on the fly—before they move through your organization. You create and enforce central policies based on users and user groups for specific files and folders without user interaction.

Management of Native Encryption v1.0

Management of native encryption v1.0 allows customers to manage the native encryption functionality offered by Apple FileVault on OS X Mountain Lion and OS X Mavericks directly from McAfee® ePolicy Orchestrator® (McAfee ePO™) software. It thus provides zero-day compatibility with OS X patches, upgrades, firmware updates from Apple, as well as zero-day support for new hardware from Apple. Management of native encryption v1.0 allows administrators to manually import FileVault Recovery Keys where users have already manually enabled FileVault.

Remote, Out­of­Band Management Reduces Operational Costs

McAfee ePO Deep Command software uses Intel vPro Active Management Technology (AMT) that helps reduce operational costs, enhances security and compliance, and accelerates remote PC remediation. McAfee ePO Deep Command software can wake up PCs, update policies, and securely return them to their power state.²

Centralized Security Management and Advanced Reporting

Use the centralized McAfee ePO software console to implement and enforce mandatory, companywide security policies that control how data is encrypted, monitored, and protected from loss. Centrally define, deploy, manage, and update security policies that encrypt, filter, monitor, and block unauthorized access to sensitive data.

McAfee Complete Data Protection — Advanced Suite Features

Device control

• Monitor and regulate how employees transfer data to removable media—even when they are not connected to the corporate network.

Data loss prevention

• Control how users send, access, and print sensitive data at the endpoint—physical or virtual, through applications, and onto storage devices.
• Stop confidential data loss initiated by Trojans, worms, and file-sharing applications that hijack employee credentials.
• Protect all data, formats, and derivatives, even when data is modified, copied, pasted, compressed, or encrypted.

Enterprise­grade drive encryption

• Automatically encrypt entire devices without requiring user action or training or impacting system resources.
• Identify and verify authorized users using strong multifactor authentication.

Removable media encryption

• Automatic, on-the-fly encryption for virtually any mobile storage device, company-issued or not.
• Access encrypted data anywhere without the need for any additional software.

Persistent file and folder encryption

• Keep files and folders secure wherever they are saved, including on local hard disks, file servers, removable media—and even as email attachments without requiring the email recipient to have encryption software.

Manage native encryption on Macs

• Manage FileVault on any Mac hardware that can run OS X Mountain Lion or OS X Mavericks directly from McAfee ePO software.
• Enforce a standard password complexity policy on local OS X users.
• Report compliance in various reports and dashboards in McAfee ePO software.

Remote, out­of­band management

• Remotely manage PCs beyond the operating system at the hardware level.
• Power on and wake up a PC, even if encrypted to execute security tasks.

Centralized management console

• Use the McAfee ePO software infrastructure management to manage full-disk, file and folder, and removable media encryption; control policy and patch management; recover lost passwords; and demonstrate regulatory compliance.
• Synchronize security policies with Microsoft Active Directory, Novell NDS, PKI, and others
• Prove devices are encrypted with extensive auditing capabilities.
• Log data transactions to record such information as sender, recipient, timestamp, data evidence, date and time of last successful login, date and time last update received, and whether the encryption was successful or not.

2 Keep Your Client PCs Safer, Wherever They Go: http://www.mcafee.com/us/resources/solution-briefs/sb-keep-your-client-pcs-safer.pdf

System Requirements:

These are minimum system requirements only. Recommended requirements are in parenthesis, where applicable. Actual requirements will vary depending on the nature of your environment.

McAfee ePolicy Orchestrator (ePO) Server

• Operating systems
  • Microsoft Server 2003 Service Pack 1 (SP1), 2003 R2
• Hardware requirements
  • CPU: Pentium II-class 450 MHz or faster
  • RAM: 512 MB (1 GB recommended)
  • Disk space: 250 MB

• Operating systems
  • Windows 10
  • Windows 8.1 (32-bit and 64-bit versions)
  • Windows 8 (32-bit and 64-bit versions)
  • Windows 7 (32-bit and 64-bit versions)
  • Windows Vista (32-bit and 64-bit versions)
  • Windows 2008 Server (32-bit and 64-bit versions)
  • Windows XP (32-bit version only)
  • Windows 2003 Server with Service Pack 1 (SP1) or higher (32-bit version only)
• Hardware requirements
  • CPU: Pentium III (1 GHz or faster)
  • RAM: 256 MB minimum (1 GB recommended)
  • Hard disk: 200 MB minimum free disk space
  • Network connection: TCP/IP for remote management

Apple Mac Laptop Endpoints

• Operating systems
  • Mac OS X El Capitan
  • Mac OS X Mavericks
  • Mac OS X Mountain Lion
  • Mac OS X Lion
  • Mac OS X Leopard (10.5.8 or later)
• Hardware requirements
  • CPU: Intel-based Mac laptop with 64-bit EFI
  • RAM: 1 GB minimum
  • Hard disk: 200 MB minimum free disk space
  • Network connection: TCP/IP for remote management

Documentation:

Download the McAfee Complete Data Protection Advanced Datasheet (PDF).