McAfee Network Security Platform M-2950
A uniquely intelligent security solution that discovers and blocks sophisticated threats in the network

Features & Benefits:

Get intelligent security management
Reduce the expertise needed and time required to monitor and investigate security events, while simplifying the administration of large and complex deployments. Progressive disclosure delivers the right information when and where you need it through guided drill downs, while hierarchal management scales for the largest deployments.

Attain unparalleled threat protection
Unparalleled threat prevention is born from an ultra efficient vulnerability-based signature engine that is transformed into next-generation platform by integrating cutting-edge behavioral analysis and multi-event correlation. The low-touch signature defenses keep operation costs low, efficiently defending against known threats, while the advanced behavioral analysis and event correlation protects against next-generation and zero-day threats.

Leverage global malware protection
Get comprehensive malware coverage by intelligently directing a portfolio of antimalware defenses. Confidently reduce malware security holes, with more defenses than any other vendor, against this newest and deadliest network security attack vector.

Use our Security Connected framework
Improve network security posture, optimizes network security for greater cost effectiveness, and aligns network security strategically with business initiatives. Security Connected is McAfee’s integrated approach to network security that seamlessly incorporates data and workflows from other security products.

Attain performance and scalability
Get reliable performance so the best security is available under the heaviest loads, as the network grows, or even if segments of the network fail. Achieve high-performance, multi-gigabit throughput even when next-generation features, enabled with stateful fail-over, are available.

Gain visibility and control
Get user and device intelligence that seamlessly integrates into controls, analysis, and reporting in deep applications. This deep visibility uncovers suspicious anomalies that cannot be seen in aggregate, allowing more flexibility to align control policies to the needs of the organization.

Additional Features

Advanced intrusion prevention

• IP defragmentation and TCP stream reassembly
• Anomaly detection
• McAfee, user-defined, and open-source signatures
• Host quarantine
• Advanced evasion protection
• Inspection of virtual environments

Botnet protection

• Heuristic bot detection
• Multi-attack correlation
• Command and control database

DoS and DDoS prevention

• Threshold and heuristic-based detection
• Host-based connection limiting
• Self-learning profile-based detection

McAfee GTI

• File reputation
• IP reputation
• Geo-location

High availability

• Active-active with stateful failover
• External fail-open (active)
• Built-in fail-open (for copper ports only)

Protocol tunneling support

• IPv6
• V4-in-V4, V4-in-V6, V6-in-V4, and V6-in-V6 tunnels
• MPLS
• GRE
• Q-in-Q Double VLAN

McAfee Network Security Manager

• Tiered management, up to 1,000 sensors
• User authentication (Radius, LDAP, and TACACS)
• Automated failover and fail-back
• Disaster recovery of critical configuration data
• Centralized, hierarchical policy management

Solutions:

Protect Against Today’s Stealthy Threats

Your network faces advanced, stealthy attacks that can evade traditional detection methods, leaving your network exposed to crippling breaches and downtime. Unfortunately, most organizations lack the financial and operational resources to implement and manage the combination of tools and technologies required to provide adequate defense.

McAfee Network Security Platform is an integrated network security solution that combines next-generation threat prevention with intuitive security management to improve detection accuracy and streamline security operations. It provides industry-leading coverage against malware, zero-day threats, denial-of-service attacks, and botnets.

Unparalleled threat prevention

McAfee Network Security Platform is based on a next-generation inspection architecture designed to perform deep inspection of network traffic while maintaining line-rate speeds. It uses a combination of advanced inspection techniques—including full protocol analysis, threat reputation, behavior analysis, and advanced malware analysis to detect and prevent both known and zero-day attacks on the network.

Comprehensive malware defense

No single malware detection technology can prevent all attacks, which is why McAfee Network Security Platform incorporates several advanced malware analysis techniques to prevent unwanted malware from wreaking havoc on your network. It combines file-reputation from McAfee GTI, deep file analysis with JavaScript detection, and an advanced anti-malware engine to detect zero-day threats, custom malware, and other stealthy attacks.

Security Connected

Getting your hands on the data you need has never been easier. McAfee offers real-time integration with McAfee® ePolicy Orchestrator® (McAfee ePO™) software and McAfee Enterprise Security Manager for real-time correlation of network events across all relevant sources. Through integration with McAfee ePO software and McAfee Enterprise Security Manager, McAfee Network Security Platform gets an accurate view of threats as they relate to devices and users and which ones present the greatest risk to the organization. The solution incorporates device details, user information, endpoint security posture, vulnerability assessments, and other rich information to help organizations understand threat severity and business risk factors.

Performance and scalability

Get the best of both worlds—security and high performance. McAfee Network Security Platform combines a single-pass, protocol-based inspection architecture with purpose-built, carrier-class hardware to achieve real-world inspection of more than 20 Gbps in a single device. Its ultra-efficient architecture preserves performance regardless of security settings, while other IPS solutions can experience up to 50 percent reduction in throughput with “security over performance” policies.

Visibility and control

Make informed decisions about the applications and protocols on your network. McAfee Network Security Platform is the first and only IPS solution to combine advanced threat prevention and application awareness into a single security decision engine. We correlate threat activity with application usage, including layer 7 visibility of more than 1,500 applications and protocols, to allow you to make more informed decisions about which applications you allow on your network. In addition to application identification, McAfee Network Security Platform provides user and device visibility. It prioritizes risky hosts and users, including active botnets, through the identification of anomalous network behavior.

Intelligent security management

Make the most of your security investment through intelligent network security management. McAfee Network Security Manager offers scalable webbased management from two to several hundred network security appliances. It offers intuitive progressive disclosure workflows that guide administrators to relevant alerts as well as easy-to-use security dashboards that automatically prioritize events based on alert severity and relevancy. McAfee Network Security Platform integrates with McAfee ePO software to give your organization a consolidated view of risk and compliance across the entire enterprise, including up-to-the-minute assessments of at-risk infrastructure based on system vulnerabilities, network defenses, and endpoint security levels.

Specifications:

Network Security Platform Specifications
	10 Gigabit Ethernet Connectivity
Sensor Hardware Components	M-8000	M-6050	M-4050	M-3050
Performance
Real-World Throughput	10 Gbps	5 Gbps	3 Gbps	1.5 Gbps
Maximum Throughput (UDP 1512 Byte Packets)	Up to 20 Gbps	Up to 10 Gbps	Up to 4 Gbps	Up to 2.5 Gbps
Maximum Concurrent Connections	4,000,000	2,000,000	1,500,000	750,000
TCP Connections per Second	250,000	125,000	75,000	38,000
HTTP Connections per Second	120,000	60,000	36,000	18,000
Throughput with SSL Decryption (based on 10% SSL traffic)	8.8 Gbps	4.4 Gbps	2.7 Gbps	1.3 Gbps
Maximum SSL Flow Count	400,000	200,000	150,000	75,000
SSL Keys Imported	256	256	256	256
Typical Latency	Less than 100 µs	Less than 100 µs	Less than 100 µs	Less than 100 µs
Number of Virtual IPS Systems	1,000	1,000	1,000	1,000
Maximum DoS Profiles	5,000	5,000	5,000	5,000
ACL Rules	1,000	1,000	1,000	1,000
Ports
Fixed Gigabit Ethernet—Copper Ports (internal fail-open)	—	—	—	—
SFP Gigabit Ethernet Ports	16	8	8	8
10-Gigabit Ethernet	12	8	4	4
Dedicated Response Ports (RJ45)	1 (1G / 100M)	1 (1G / 100M)	1 (1G / 100M)	1 (1G / 100M)
Dedicated Management Ports (RJ45)	1 (1G / 100M)	1 (1G / 100M)	1 (1G / 100M)	1 (1G / 100M)
Control Ports for External Fail-Open Kits	14	8	6	6
Physical
Dimensions	2 X 2RU Rack Mountable 16.75 (W) x 3.05 (H) x 30.00 (D) each	2RU Rack Mountable 16.75 (W) x 3.05 (H) x 30.00 (D) each	2RU Rack Mountable 16.75 (W) x 3.05 (H) x 30.00 (D) each	2RU Rack Mountable 16.75 (W) x 3.05 (H) x 30.00 (D) each
Weight	94 lbs. (2 x 47 lbs.)	47 lbs.	47 lbs.	47 lbs.
Maximum Power Consumption	900w (2 x 450w)	450w	450w	450w
DC Power Available	Optional	Optional	Optional	Optional
Redundant Power Supply	Optional	Optional	Optional	Optional
Power	100–240VAC (50 / 60Hz)
Temperature	0° to 35° C (Operating) –40° to 70° C (Non-operating)
Relative Humidity (Non-condensing)	Operational: 10% to 90% Non-operational: 5% to 95%
Altitude	0 to 10,000 Feet
Safety Certification	UL 1950, CSA-C22.2 No. 950, EN-60950, IEC 950, EN 60825, IEC 60825, 21CFR1040 CB license and report covering all national country deviations.
EMI Certification	FCC Part 15, Class A (CFR 47) (USA), ICES-003 Class A (Canada), EN55022 Class A (Europe), CISPR22 Class A (International)

Network Security Platform Specifications (Additional Models)
Sensor Hardware Components	M-2950	M-2850	M-1450	M-1250
Performance
Real-World Throughput	1 Gbps	600 Mbps	200 Mbps	100 Mbps
Maximum Throughput (UDP 1512 Byte Packets)	Up to 1.5 Gbps	Up to 1 Gbps	Up to 300 Mbps	Up to 150 Mbps
Maximum Concurrent Connections	750,000	750,000	80,000	40,000
TCP Connections per Second	31,500	20,800	8,300	4,150
HTTP Connections per Second	15,000	10,000	4,000	2,000
Throughput with SSL Decryption (based on 10% SSL traffic)	900 Mbps	500 Mbps	N/A	N/A
Maximum SSL Flow Count	25,000	25,000	N/A	N/A
SSL Keys Imported	256	256	N/A	N/A
Typical Latency	Less than 100 µs	Less than 100 µs	Less than 100 µs	Less than 100 µs
Number of Virtual IPS Systems	100	100	32	16
Maximum DoS Profiles	5,000	300	120	100
ACL Rules	1,000	400	100	50
Ports
Fixed Gigabit Ethernet—Copper Ports (internal fail-open)	8	8	8	8
SFP Gigabit Ethernet Ports	12	12	—	—
10-Gigabit Ethernet	—	—	—	—
Dedicated Response Ports (RJ45)	1 (1G / 100M)	1 (1G / 100M)	1 (1G / 100M)	1 (1G / 100M)
Dedicated Management Ports (RJ45)	1 (1G / 100M)	1 (1G / 100M)	1 (1G / 100M)	1 (1G / 100M)
Control Ports for External Fail-Open Kits	6	6	—	—
Physical
Dimensions	2RU Rack Mountable 15.88 (W) x 3.30 (H) x 24.50 (D) each	2RU Rack Mountable 15.88 (W) x 3.30 (H) x 24.50 (D) each	1RU Rack Mountable 17.37 (W) x 1.65 (H) x 13.50 (D) each	1RU Rack Mountable 17.37 (W) x 1.65 (H) x 13.50 (D) each
Weight	40 lbs.	40 lbs.	12 lbs.	12 lbs.
Maximum Power Consumption	450w	450w	120w	120w
DC Power Available	Optional	Optional	N/A	N/A
Redundant Power Supply	Optional	Optional / N/A	N/A	N/A
Power	100–240VAC (50 / 60Hz)
Temperature	0° to 40° C (Operating) –40° to 70° C (Non-operating)
Relative Humidity (Non-condensing)	Operational: 10% to 90% Non-operational: 5% to 95%
Altitude	0 to 10,000 Feet
Safety Certification	UL 1950, CSA-C22.2 No. 950, EN-60950, IEC 950, EN 60825, IEC 60825, 21CFR1040 CB license and report covering all national country deviations.
EMI Certification	FCC Part 15, Class A (CFR 47) (USA), ICES-003 Class A (Canada), EN55022 Class A (Europe), CISPR22 Class A (International)

Documentation:

Download the McAfee Network Security Platform Datasheet (PDF).