McAfee Host Intrusion Prevention for Desktop
Industry-leading, proactive protection against zero-day threats for desktops and laptops

Features & Benefits:

Keep your business running smoothly
Prevent intrusions, protect assets, and enforce intrusion prevention system (IPS) and zero-day threat protection coverage at all levels: network, endpoint, and application. Integrated reputation-based global intelligence in the desktop firewall (Microsoft Windows only) blocks threats such as botnets and denial of service before attacks can occur.

Get the broadest intrusion prevention coverage
Trust McAfee behavioral protection to secure endpoints against unknown attacks. Our signature protection identifies and blocks known attacks while a stateful firewall applies policies, bars unsolicited inbound traffic, and controls outbound traffic.

Save time and cut costs with simplified, centralized management
Protect and manage all desktops across your entire enterprise with the McAfee ePolicy Orchestrator (ePO) console, the scalable, centralized platform for easy deployment, management, reporting, and auditing.

Create custom, location-based policies
Apply different levels of security using rules based on the endpoint’s connection — on the corporate network, over VPN, or from a public network — with connection-aware protection.

Spot and block new vulnerabilities
Count on automatic security content updates targeting specific vulnerabilities to recognize unknown exploits and stop them from executing. Security content updates do not require system reboots, and updating signatures is similar to updating .DAT files.

Avoid trouble with prioritized patching
Reduce patching frequency and deploy patches on a priority basis for the most effective and efficient use of IT resources.

Prove compliance without headaches
Use McAfee’s easy-to-understand actionable views, workflow, event monitoring, and reporting to quickly remediate threats and maintain compliance.

The Challenge

Anti-virus alone is not enough, as attacks and vulnerability exploits are being released faster and are becoming more complex. The solution is to implement a proactive security strategy that prevents attacks from happening in the first place. With a proactive approach to securing endpoints, IT departments can ensure that all endpoints and confidential data are protected and business continuity is maintained.

McAfee Host Intrusion Prevention for Desktop

As an integral part of McAfee endpoint suites, McAfee® Host Intrusion Prevention for Desktop delivers unprecedented levels of protection from known and unknown zero-day threats by combining signature and behavioral intrusion prevention system (IPS) protection with the industry’s only dynamic, stateful firewall. McAfee Host Intrusion Prevention for Desktop reduces patching frequency and urgency, preserves business continuity and employee productivity, protects data confidentiality, and simplifies regulatory compliance.

Advanced threat protection through our dynamic, stateful desktop firewall
Unlike traditional system firewalls that rely on specific rules, McAfee Host Intrusion Prevention for Desktop has integrated McAfee Global Threat Intelligence™ network connection reputation to secure desktops and laptops against advanced threats such as botnets, distributed denial-of-service (DDoS), and emerging malicious traffic before attacks can occur. With the increase in advanced threats, McAfee Global Threat Intelligence offers the most sophisticated protection you can deploy. Additional firewall features, such as application and location policies, further safeguard laptops and desktops especially when they are not on the corporate network.

Apply operating system and application patches less frequently, less urgently, and on your own schedule
A large percentage of exploits are released as early as three days after disclosure of the vulnerabilities. Yet, for many organizations, it may take up to 30 days to test and deploy patches for all endpoints. McAfee Host Intrusion Prevention for Desktop bridges the security gap while making the patching process easier and more efficient.

• Out-of-the-box protection boasts a superior track record. McAfee Host Intrusion Prevention for Desktop protects against an average of 97 percent of exploits1. Protection is provided against both Microsoft and Adobe vulnerabilities.
• Vulnerability shielding automatically updates signatures to protect endpoints against attacks resulting from exploited vulnerabilities
• Signature updates can be automatically and regularly downloaded for protection assurance

Endpoints are no longer vulnerable during startup
Laptops and desktops are vulnerable during startup because the security policies have not yet been enforced. During this vulnerable startup time, endpoints could be subject to network-based attacks and security services could be disabled. McAfee Host Intrusion Prevention for Desktop blocks attacks from occurring during this vulnerable window with firewall and IPS startup protection.

• Startup firewall protection allows only outbound traffic during startup until the complete firewall policy has been enforced
• Startup IPS protection prevents McAfee security services from being disabled during startup until the complete IPS policy has been enforced

Simplified and streamlined management
Creating and maintaining multiple firewall and IPS policies is necessary in a large organization but is usually tedious and time consuming. McAfee Host Intrusion Prevention for Desktop policy and IPS catalogs streamline that process, allowing you to create and maintain multiple firewall and IPS policies that can be applied to different groups of users and reused as needed.

Creating and maintaining multiple firewall and IPS policies is necessary in a large organization but is usually tedious and time consuming. McAfee Host Intrusion Prevention for Desktop policy and IPS catalogs streamline that process, allowing you to create and maintain multiple firewall and IPS policies that can be applied to different groups of users and reused as needed.

System Requirements:

These are minimum system requirements. Actual requirements will vary depending on the nature of your environment.

Minimum hardware requirements

• Intel or AMD x86 and x64
• Free disk space (client): 15 MB, but 100 MB during installation
• Memory: 256 MB RAM
• Network environment: Microsoft or Novell NetWare; NetWare networks require TCP/IP
• NIC: Network interface card; 10 mbps or higher

Operating Systems

• Microsoft Windows (English, French, German, Spanish, Japanese, Korean, traditional Chinese)
• Microsoft Windows Vista with Service Pack 1 (SP1) (32-bit and 64-bit)
• Microsoft Windows XP Home with SP3
• Microsoft Windows XP Professional with SP3
• Microsoft Windows XP Tablet PC
• Microsoft Windows 7

Compatibility with major virtualization platforms Virtualization has been adopted by practically all IT departments, and compatibility with the major virtualization platforms is essential for any product to be successful. McAfee Host Intrusion Prevention for Desktop is compatible with the three major virtualization platforms, VMware, Citrix, and Microsoft Hyper-V. The following table lists the supported products from each of these three vendors.
VMware	Citrix	Microsoft
VMware ESX–3.5 & 4.00	Citrix XenServer–5.0 & 5.5	Microsoft Hyper-V Server 2008 & 2008 R2
VMware Vsphere–4.0	Citrix Xen Desktop–3.0 & 4.0	Microsoft VDI
VMware View–3.1 & 4.0	Citrix Xen App–5.0 & 6.0	Microsoft App-V–4.5 & 4.6
VMware ThinApp–4.0 & 4.5		XP Mode on Windows 7
VMware ACE–2.5 & 2.6
VMware Workstation 6.5 & 7.0

Documentation:

Download the McAfee Host Intrusion Prevention for Desktop Datasheet (PDF).