McAfee Host Intrusion Prevention for Server
Proactively secure servers against zero-day attacks

Features & Benefits:

Keep your business safe, up, and running
Prevent intrusions, protect assets, and enforce intrusion prevention system (IPS) and zero-day threat protection coverage at all levels: network, endpoint, and application.

Save time and cut costs with simplified, centralized management
Protect and manage servers across your entire enterprise with the McAfee ePolicy Orchestrator (ePO) console, the scalable and centralized platform for deployment, management, reports, and audits.

Get customized protection for web and database servers
Maintain system uptime and productivity with specialized protection that secures critical servers against attacks, including directory traversal and SQL injection attacks.

Stop new threats on contact
Trust integrated reputation-based global intelligence in the system firewall (Microsoft Windows only) to block threats such as botnets and denial of service before attacks can occur.

Save trouble with prioritized patches
Reduce patching frequency and deploy patches on a priority basis for the most effective and efficient use of IT resources.

Prove compliance without headaches
Use McAfee’s easy-to-understand actionable views, workflow, event monitoring, and reporting to quickly remediate threats and maintain compliance.

McAfee Host Intrusion Prevention for Server

McAfee® Host Intrusion Prevention for Server delivers specialized web and database server protection to maintain system uptime and business continuity along with the industry’s only dynamic and stateful firewall to shield against advanced threats and malicious traffic. In addition, it also provides signature and behavioral intrusion prevention system (IPS) protection. McAfee Host Intrusion Prevention for Server reduces patching frequency and urgency, preserves business continuity and employee productivity, protects data confidentiality, and simplifies regulatory compliance.

Defend servers and applications from attacks, and prevent data loss

Servers are increasingly the target of attacks because they house large amounts of corporate data and are also critical for performing day-to-day activities. McAfee Host Intrusion Prevention for Server secures mission-critical servers to maintain system uptime and productivity.

• Web server protection
• Filter HTTP requests to prevent directory traversal, Unicode, and denial-of-service (DoS) attacks
• Use predefined shielding policies and rules to prevent attacks and loss of data
• Database server protection
• Examine database queries to prevent attacks, such as SQL injection
• Use predefined shielding policies and rules to ensure normal behavior and prevent tampering of data

Advanced threat protection through our dynamic, stateful system firewall

Unlike traditional system firewalls that rely on specific rules, McAfee Host Intrusion Prevention for Server has integrated McAfee Global Threat Intelligence™ network connection reputation to protect servers against advanced threats such as botnets, distributed denial-of-service (DDoS), and emerging malicious traffic before attacks can occur. With the increase in advanced threats, McAfee Global Threat Intelligence offers the most sophisticated protection you can deploy

Apply operating system and application patches less frequently, less urgently, and on your own schedule

A large percentage of exploits are released as early as three days after disclosure of the vulnerabilities. Yet, for many organizations, it may take up to 30 days to test and deploy patches for all endpoints. McAfee Host Intrusion Prevention for Server bridges the security gap while making the patching process easier and more efficient.

• Out-of-the-box protection boasts a superior track record. McAfee Host Intrusion Prevention for Server protects against an average of 97 percent of exploits¹. Protection is afforded against both Microsoft and Adobe vulnerabilities. Vulnerability shielding automatically updates signatures to protect endpoints against attacks resulting from exploited vulnerabilities
• Signature updates can be automatically and regularly downloaded for protection assurance

1 NSS Labs Endpoint Protection Products Group Test Report: Host Intrusion Prevention, Q2 2010

Servers are no longer vulnerable during startup

Servers are vulnerable during startup because the security policies have not yet been enforced. During this vulnerable startup time, they could be subject to network-based attacks and security services could be disabled. McAfee Host Intrusion Prevention for Server blocks attacks from occurring during this vulnerable window with firewall and IPS startup protection.

• Startup firewall protection allows only outbound traffic during startup until the complete firewall policy has been enforced
• Startup IPS protection prevents McAfee security services from being disabled during startup until the complete IPS policy has been enforced

Simplified and streamlined management

Creating and maintaining multiple firewall and IPS policies is necessary in a large organization but is usually tedious and time consuming. McAfee Host Intrusion Prevention for Server policy and IPS catalogs streamline that process, allowing you to create and maintain multiple firewall and IPS policies that can be applied as needed.

Optimize and simplify management further with McAfee ePolicy Orchestrator® (McAfee ePO™) software, our single, centralized console, which helps you oversee and administer all your protection. Full integration with McAfee ePO software saves you money and time with significant operational efficiencies.

System Requirements:

These are minimum system requirements. Actual requirements will vary depending on the nature of your environment.

Operating Systems

• Microsoft Windows (English, French, German, Japanese, Korean, Spanish, traditional Chinese)
• Microsoft Windows Server 2008 (32-bit and 64-bit)
• Microsoft Windows Server 2003 Standard with Service Pack 2 (SP2) or higher (32-bit and 64-bit)
• Microsoft Windows Server 2003 R2 Standard (32-bit and 64-bit)
• Microsoft Windows Server 2003 Enterprise with SP2 or higher (32-bit and 64-bit)
• Microsoft Windows Server 2003 R2 Enterprise (32-bit and 64-bit)
• Microsoft Windows Server 2003 Web with SP1 or higher
• Microsoft Windows Server 2003 R2 Web
• Microsoft Windows 2000 Advanced Server with SP4 or higher
• Microsoft Windows 2000 Datacenter Server with SP4 or higher
• Microsoft Windows 2000 Professional with SP4 or higher
• Microsoft Windows 2000 Server with SP4 or higher
• Red Hat Enterprise Linux 4.0 (32-bit); kernel modules supported:
  • 2.6.9-42.EL
  • 2.6.9-42.EL-smp
  • 2.6.9-34.EL
  • 2.6.9-34.EL-smp
  • 2.6.9-22.EL
  • 2.6.9-22.EL-smp
• Sun Solaris
  • SPARC Solaris 10
  • SPARC Solaris 9 (32-bit or 64-bit kernel)
  • SPARC Solaris 8 (32-bit or 64-bit kernel)
• SUSE Linux Enterprise
  • 10, 11 (32-bit or 64-bit kernel)

Supported Web Server Platforms

• IIS 4.0, 5.0, and 6.0 (Microsoft Windows)
• Apache Web Server 2.0.42 or higher
• Apache Web Server 1.3.6 or higher
• Sun Java Web Server 6.1
• Sun ONE Web Server 6.0

Supported Database Server Platforms

• Microsoft SQL Server 2005 and 2008

Compatibility with major virtualization platforms Virtualization has been adopted by practically all IT departments and compatibility with the major virtualization platforms is essential for any product to be successful. McAfee Host Intrusion Prevention for Server 8.0 is compatible with the three major virtualization platforms, VMware, Citrix, and Microsoft Hyper-V. The following table lists the supported products from each of these three vendors.
VMware	Citrix	Microsoft
VMware ESX–3.5 & 4.0	Citrix XenServer–5.0 & 5.5	Microsoft Hyper-V Server 2008 & 2008 R2
VMware Vsphere–4.0	Citrix Xen Desktop–3.0 & 4.0	Microsoft VDI
VMware View–3.1 & 4.0	Citrix Xen App–5.0 & 6.0	Microsoft App-V–4.5 & 4.6
VMware ThinApp–4.0 & 4.5		XP Mode on Windows 7
VMware ACE–2.5 & 2.6
VMware Workstation 6.5 & 7.0
VMware Player–2.5 & 3.0

Documentation:

Download the McAfee Host Intrusion Prevention for Server Datasheet (PDF).