McAfee is revamping its security product line, providing cloud security services that meld together its data leakage protection, mobile security and email filtering capabilities with Intel’s cloud access control software and appliances.
We want to be that proxy as data moves from a private to public cloud.
Marc Olesen, senior vice president and general manager of content and cloud security, McAfee
The streamlined suite is called the McAfee Cloud Security Platform and was revamped, according to McAfee and Intel executives, to make purchase decisions easier for customers. The suite is designed so customers can add modules when needed to protect network traffic moving between the organization and a cloud service provider.
The company repackaged its email security and Web security suite and added integration with its Global Threat Intelligence (GTI) service, which identifies domains and IP addresses that are infected or hosting malware attacks to provide near real-time updates when threats are detected.
The McAfee GTI service was also integrated into the Web security and mobile protection software. McAfee said its mobile strategy is to direct devices to send traffic back through the Web Security Gateway to apply enterprise security policies across different device platforms. The software also secures traffic traveling from device to internal intranet applications.
McAfee’s cloud security strategy is following a growing trend by security vendors to offer a portfolio of security products designed to protect traffic flowing between companies and their cloud service providers. Experts say migrating data and applications to the cloud requires a change to network security services. Symantec, Trend Micro and others offer similar threat management capabilities. Nearly all endpoint security vendors also provide policy management and encryption capabilities for different mobile device platforms.
The repackaging for the McAfee Email and McAfee Web Security modules includes streamlined pricing options. McAfee offers 1-, 2- and 3-year subscriptions based on the deployment model. McAfee said the new pricing allows the customer to switch between deployment options during the course of subscription.
The platform is designed to protect traffic moving from the enterprise to the cloud, said Marc Olesen, senior vice president and general manager of content and cloud security for McAfee. Olesen said McAfee sees three major streams of traffic converging: Web-based traffic, identity and authentication traffic and email traffic. He said the platform is designed to enable organizations protect each traffic stream.
“We want to be that proxy as data moves from a private to public cloud,” Olesen said.
In addition, McAfee’s DLP technologies have been extended to provide email attachment content scanning, file fingerprinting and file reputation capabilities. The DLP suite is offered as a SaaS or on-premise model.
Tighter integration with Intel
McAfee, which was acquired by Intel Corp. last summer for $7.7 billion, has incorporated the Intel Cloud Identity and Access Management software as part of its Cloud Security Platform. The company is touting the Intel Expressway Cloud Access 360, which was announced in March and addresses access control for cloud applications using enterprise identities.
Cloud Access 360 provides user provisioning, federated single sign-on, strong authentication with hardware or software tokens and cloud-based identity management capabilities. Intel works closely with Nordic Edge, based in Sweden, to provide the identity management capabilities.
McAfee said the Intel Expressway Service Gateway, which has been on the market for three years, is also an option in its Cloud Security Platform. The gateway is designed to secure traffic between enterprise and the hosted applications. It offloads application-level API security, and handles network protocols to identify token exchange and access management.
“It takes care of things like certificate handling, XML and SOAP-based threats to provide quality of service and routing and other security functions such as encryption,” said Girish Juneja, director of Intel Application and Identity Products.
McAfee’s DLP suite and email and Web security modules are integrated with its ePolicy Orchestrator platform for reporting and centralized management. The company said it recently completed integration of the Intel Expressway Service Gateway and is still working on integrating the other Intel pieces into ePO.