MCAFEE T-500

network_threat_behavior_analysis

The McAfee Network Threat Behavior Analysis T-500 provides greater real-time visibility of the network infrastructure. It leverages network flow data to identify and characterize threats beyond the perimeter of the intrusion prevention system (IPS).

By analyzing traffic from switches/routers of vendors such as Cisco, Juniper, and Extreme Networks, McAfee Network Threat Behavior Analysis can pinpoint risky behavior to specific points in the network and effectively prevent internal and external threats. McAfee Network Threat Behavior Analysis rapidly drills down into complex, multivector attacks and blended threats. It holistically evaluates network-level threats, identifies the overall behavior of each network element, and enables instant abstraction of potential anomaly or attack type-including distributed denial of service (DDoS), botnets, or worms.

Overview
Features and Benefits
Model Specs
Data Sheets

McAfee Network Threat Behavior Analysis Overview:

Maintain a comprehensive and efficient network security infrastructure with McAfee Network Threat Behavior Analysis (NTBA). A single sensor effectively collects traffic, and analyzes host and application behavior to detect worms, zero-day threats, botnets, and reconnaissance attacks.

Description:

Get cost-effective, network-wide visibility with McAfee Network Threat Behavior Analysis (NTBA).

McAfee NTBA monitors and reports unusual network behavior by analyzing traffic from switches and routers from vendors such as Cisco, Juniper Networks, and Extreme Networks. It comes fully equipped with quad-core processors, a RAID array, distinct flow capacity, gigabit Ethernet connectivity, and offline storage area network connectivity.

McAfee NTBA collects and analyzes traffic from the entire network—host and applications—to detect worms, botnets, zero-day threats, spam, and reconnaissance attacks. It reports any unusual behavior to help you maintain a comprehensive and efficient network security infrastructure.

McAfee NTBA seamlessly integrates with the McAfee Network Security Platform intrusion prevention system to build a comprehensive and robust security infrastructure.

Benefits:

Minimize IT and business risk
Proactively detect behavior-based threats—even unknown threats; McAfee Network Threat Behavior Analysis (NTBA) monitors and reports unusual behavior by analyzing network traffic; identify and quickly respond to unauthorized application usage
Maximize coverage and value
Pinpoint problem segments with cost-effective, network-wide visibility; sort and analyze network traffic effortlessly; eliminate manual diagnosis of network-related traffic problems
Improve security asset value
Protect against attacks arising from almost anywhere in your network—without extensive footprint expansion; with McAfee NTBA, McAfee Network Security Platform (NSP) can see attacks emerging from the farthest regions of your network to deliver a better return on your network security investment

Features:

Network-wide visibility and insight
Analyze host and application behavior; collect and analyze traffic from the entire network through a single McAfee NTBA sensor; identify threats through behavior-based algorithms; inspect networks for worms, botnets, spam, zero-day threats, reconnaissance attacks, and associated behaviors
Easily integrates into your existing security infrastructure
Integrate McAfee NTBA with the McAfee NSP intrusion prevention system to correlate unusual network behavior caused by intrusions; compatible with switches and routers from vendors such as Cisco, Juniper Networks, and Extreme Networks, integrates seamlessly with McAfee ePolicy Orchestrator, McAfee Network Security Manager, and McAfee Vulnerability Manager
Fully equipped for high performance
Get network-class performance and reliability with in-system redundancy and resource management

Key Benefits

Minimize IT and business risk

Proactive, behavior-based threat detection
Effective detection of unknown threats
Monitors and reports unusual network behavior by network traffic analysis
Detects attacks to help avoid network penetration
Identifies and responds to unauthorized application usage quickly
Helps ensure regulatory compliance through integration with McAfee Network Security Platform, McAfee ePO, and McAfee Vulnerability Manager

Maximize coverage and value

Provides cost-effective, network-wide visibility
Effortless sorting and analysis of network traffic
Prevents manual diagnosing of network-related traffic problems
Pinpoints problem segments
Anomaly detection includes zero-day, spam, botnet, and reconnaissance attacks

Enhance competitive advantage

Provides an additional layer of security
Prevents network threats and exploits from interrupting business operations
Performs analysis tasks quickly and efficiently
Delivers enterprise-level performance and ensures reliability
Simplifies operations concerned with threat and signature management
Accelerates network performance, scalability, and flexibility
Empowers real-time security decisions

Integration helps ensure regulatory compliance

Integrates with McAfee Network Security Platform IPS for correlation of unusual network behavior associated with network intrusions
Integrates with McAfee ePO software and McAfee Vulnerability Manager software to enable faster security risk management

Key Features

Fully equipped for high performance

Each McAfee Network Threat Behavior Analysis analyzer appliance incorporates:
- Quad-core processors
- RAID disk array
- Gigabit Ethernet connectivity
- Offline SAN storage
- Distinct flow capacity
Addresses today’s evolving security and network needs
Provides affordable and reliable network-class performance

Unmatched network visibility and insight

Enables cost-effective network wide visibility by collecting traffic from the entire network through a single McAfee Network Threat Behavior Analysis sensor
Monitors and reports unusual network behavior through traffic analysis
Identifies threats through behavior-based algorithms
Analyzes both host and application behavior
Inspects networks for worm, botnet, or spamassociated behavior
Probes against zero-day threats and reconnaissance attacks

Easy integration and policy enforcement

Integrates with McAfee Network Security Platform IPS to correlate any unusual network behavior caused by network intrusions
Integrates seamlessly with McAfee ePO software and McAfee Vulnerability Manager software
Compatible with switches/routers of vendors like Cisco, Juniper, Extreme Networks
Facilitates common management of McAfee Network Threat Behavior Analysis, McAfee NAC, and IPS sensors through the McAfee Network Security Manager
Promotes internal and regulatory policy enforcement

General Information
Manufacturer:	McAfee, Inc
Manufacturer Part Number:	NTB-T500-AG
Product Model:	T-500
Product Name:	T-500 Security Management System
Product Type:	Security Management System
Interfaces/Ports
Number of Ports:	Not Applicable
Ethernet Port:	Not Applicable
Fast Ethernet Port:	Not Applicable
Gigabit Ethernet Port:	Not Applicable
DSL Port:	Not Applicable
Interfaces/Ports:	1 x DB-15 VGA 1 x RJ-45 Console Management 1 x RJ-45 Network Management 2 x LC 2 x RJ-45 5 x Type A USB





Technical Information
Firewall Protection:	Access Control Anti-spam Distributed Denial of Service (DDoS) Intrusion Prevention Policy Enforcement Reconnaissance Protection Vulnerability Assessment Worm Scanning Zero Day Event








Wi-Fi:	No
Wi-Fi Standard:	Not Applicable
Number of Antennas:	Not Applicable
Antenna Gain:	Not Applicable
Antenna Type:	Not Applicable
Wireless Transmission Speed:	Not Applicable
Media & Performance
Broadband Transmission Speed:	Not Applicable
Broadband Transmission Technology:	Not Applicable
I/O Expansions
Number of Expansion Slots:	Not Applicable
Expansion Slots:	Not Applicable
Memory
Standard Memory:	12 GB
Physical Characteristics
Form Factor:	Rack-mountable