The IntruShield Security Management System

The ISM System is an advanced solution for managing IntruShield sensor appliance deployments for large and distributed enterprise, carrier and service provider networks, and is available in two versions:

IntruShield Global Manager—Suitable for global network IPS deployments of up to several hundred IntruShield appliances.

IntruShield Manager—Suitable for distributed network IPS deployments supporting up to six (6) IntruShield appliances.

Key Benefits

• Proactive risk mitigation – McAfee IntruShield provides proactive risk mitigation and assures the availability and security of critical system and network infrastructure by accurately detecting and blocking attacks on the network link before they reach their intended targets.
  
  
• Comprehensive protection from today’s dynamic threats  -McAfee IntruShield delivers comprehensive protection against today’s constantly evolving threats, including known, zero-day, and encrypted attacks.
  
  
• Virtual Perimeter Protection – Pioneering Virtual Perimeter technology provides an added layer of protection to guard against threats that penetrate traditional network perimeters or originate internal to enterprise networks.
  
  
• Highly accurate detection and reduced false positives – McAfee IntruShield integrates a full suite of pioneering technologies in a single purpose-built platform to significantly improve detection and prevention accuracy while reducing false positives.
  
  
• Enterprise-wide scalability – McAfee IntruShield delivers broad network protection extending from the network core, to the edge and branch office, while providing mission-critical solutions that scale from 100’s of Mbps to multi-gigabit bandwidth rates for large and small enterprise environments.
  
  
•  Low cost of ownership -McAfee IntruShield delivers a rapid Return on Investment (ROI) and the lowest Total Cost of Ownership (TCO) in the industry by mitigating patch management costs, eliminating availability costs, and by minimizing the resources and investments needed to deploy and maintain network protection.

Product Features

Comprehensive Management

• Comprehensive Web-Based Management - Easy-to-use, centralized, Web-based platform provides secure, scalable remote management of enterprise-wide IPS deployment.
• Comprehensive Response Management -  A complete set of response actions—including user-defined responses and extensive notification capabilities—provide proactive attack notification and prevention.
•  IPS and Internal Firewall - Unprecedented internal system and network infrastructure threat protection and policy enforcement through converged network IPS and internal firewall capabilities.

• Accurate Intrusion Intelligence™—Powerful capabilities provide detailed, accurate, and reliable information related to intrusion identification, relevancy, direction, impact, and analysis.
• Virtual IPS and Internal Firewall—IntruShield’s unique virtualization capability extends to both IPS and internal firewall, enabling highly customized and granular security policies for a dramatic reduction in false-positives.
• Granular Security Policy Management—Highly flexible and custom policy management per sensor, or from multiple network segments to individual hosts, delivers improved attack detection and prevention.

• Host and Network IPS Integration—Provides breakthrough integration by enabling IntruShield and Entercept security event aggregation and coordination on a single IntruShield Manager console
• Automated Real-Time Threat Updates—ISM’s Innovative, automated process delivers real-time, enterprise-wide signature updates without requiring sensor reboots.
• Administrative Domains—Delivers scalable security policy administration with role-based access control empowers delegation of administrative responsibilities.
• Interoperability with Enterprise Managers—Provides Interoperability with enterprise management and Security Information Management (SIM) applications to reduce total cost of ownership.