Advertisment

McAfee''s Concept Note on Server Protection

author-image
CIOL Bureau
Updated On
New Update

BANGALORE: McAfee's Entercept, a proven leader in intrusion prevention, is a natural evolution of hostbased IDS. Entercept reacts to attacks and blocks them in real-time, instead of merely detecting them. The product identifies attacks and prevents access to critical server resources before any unauthorized transactions occur. Entercept proactively protects the host by evaluating requests to the operating system and the applicationprogramming interface (API) before they are processed.

Advertisment

Using a blend of signatures and behavioral rules, Entercept is able to stop both known and unknown attacks. Entercept installs adjacent to the operating system and is able to intercept and validate system calls made into the OS. Calls are matched to a frequently updated database of both specific and generic attack behaviors. If an attack is found, pre-emptive action can automatically be taken to protect the system.

Entercept responds with actions ranging from 'Prevent' to 'Log Event.' A key security best practice is having defense in depth. Organizations should use multiple layers of security in order to best protect themselves from compromise. Entercept provides multiple layers of protection for servers.

Download this free white paper now

© CIOL Bureau