Data Sheet

McAfee Network Security Platform

A uniquely intelligent approach to network security

McAfee® Network Security Platform is a uniquely intelligent security solution that

discovers and blocks sophisticated threats in the network. Using advanced threat
detection techniques, it moves beyond mere pattern matching to defend against
Key Advantages stealthy attacks with extreme accuracy, while its next-generation hardware platform
Unparalleled threat prevention
• Next-generation architecture scales to speeds of more than 20 Gbps with a single device to meet the needs of
• Advanced botnet detection demanding networks. The Security Connected approach to security management
• Behavior-based analysis
streamlines security operations by combining real-time McAfee Global Threat
Comprehensive malware Intelligence™ (McAfee GTI™) feeds with rich contextual data about users, devices,
protection
• Signature-less, advanced
and applications for fast, accurate response to network-borne attacks.
malware analysis
• Malware investigation
Protect Against Today’s Stealthy Threats Comprehensive malware defense
dashboard Your network faces advanced, stealthy attacks that No single malware detection technology can
• Predictive malware detection can evade traditional detection methods, leaving prevent all attacks, which is why McAfee Network
via McAfee GTI your network exposed to crippling breaches and Security Platform incorporates several advanced
Security Connected
downtime. Unfortunately, most organizations malware analysis techniques to prevent unwanted
• Real-time host context via lack the financial and operational resources to malware from wreaking havoc on your network.
McAfee ePO software implement and manage the combination of tools It combines file-reputation from McAfee GTI,
• McAfee GTI and technologies required to provide adequate deep file analysis with JavaScript detection, and an
• Integrated forensic analysis defense. advanced anti-malware engine to detect zero-day
Performance and availability McAfee Network Security Platform is an integrated threats, custom malware, and other stealthy attacks.
• Up to 20 Gbps throughput network security solution that combines next- Security Connected
• Industry-leading reliability
generation threat prevention with intuitive security Getting your hands on the data you need has
• Active-active high availability
management to improve detection accuracy and never been easier. McAfee offers real-time
Intelligent security management streamline security operations. It provides industry- integration with McAfee® ePolicy Orchestrator®
• Scalable web-based leading coverage against malware, zero-day threats, (McAfee ePO™) software and McAfee Enterprise
management denial-of-service attacks, and botnets. Security Manager for real-time correlation of net-
• Intelligent alert prioritization
Unparalleled threat prevention work events across all relevant sources. Through
• Progressive disclosure workflows
McAfee Network Security Platform is based on a integration with McAfee ePO software and
Visibility and control McAfee Enterprise Security Manager, McAfee
next-generation inspection architecture designed
• Application identification
to perform deep inspection of network traffic Network Security Platform, gets an accurate
• User identification
while maintaining line-rate speeds. It uses a view of threats as they relate to devices and
• Device identification
combination of advanced inspection techniques— users and which ones present the greatest risk
including full protocol analysis, threat reputation, to the organization. The solution incorporates
behavior analysis, and advanced malware analysis device details, user information, endpoint security
to detect and prevent both known and zero-day posture, vulnerability assessments, and other rich
attacks on the network. information to help organizations understand
threat severity and business risk factors.
 Performance and scalability Additional Features
Get the best of both worlds—security and high Advanced intrusion prevention
performance. McAfee Network Security Platform •IP defragmentation and TCP stream reassembly
combines a single-pass, protocol-based inspection • Anomaly detection
architecture with purpose-built, carrier-class hard- • McAfee, user-defined, and open-source
ware to achieve real-world inspection of more signatures
than 20 Gbps in a single device. Its ultra-efficient
• Host quarantine
architecture preserves performance regardless
of security settings, while other IPS solutions
• Advanced evasion protection
can experience up to 50 percent reduction in • Inspection of virtual environments
throughput with “security over performance” Botnet protection
policies. •Heuristic bot detection
McAfee Network Security Visibility and control • Multi-attack correlation
Platform Helps You: Make informed decisions about the applications • Command and control database
Close security holes and protocols on your network. McAfee Network
• Block malicious network activity DoS and DDoS prevention
Security Platform is the first and only IPS solution
• Prevent stealthy attacks •Threshold and heuristic-based detection
to combine advanced threat prevention and
• Detect advanced malware
application awareness into a single security
• Host-based connection limiting
Reduce management headache decision engine. We correlate threat activity with • Self-learning profile-based detection
• Automatically prioritize events application usage, including layer 7 visibility of McAfee GTI
• Streamline investigative more than 1,500 applications and protocols, to •File reputation
workflows allow you to make more informed decisions about
• Eliminate unnecessary tuning
• IP reputation
which applications you allow on your network.
In addition to application identification, McAfee
• Geo-location
Adapt to the network
• 1 GigE, 10 GigE connectivity Network Security Platform provides user and High availability
• Scale to 80 Gbps device visibility. It prioritizes risky hosts and users, •Active-active with stateful failover
• Active-active high availability including active botnets, through the identifica- • External fail-open (active)
tion of anomalous network behavior.
• Built-in fail-open (for copper ports only)
Intelligent security management
Protocol tunneling support
Make the most of your security investment through •IPv6
intelligent network security management. McAfee
• V4-in-V4, V4-in-V6, V6-in-V4, and
Network Security Manager offers scalable web-
V6-in-V6 tunnels
based management from two to several hundred
network security appliances. It offers intuitive
• MPLS
progressive disclosure workflows that guide • GRE
administrators to relevant alerts as well as easy-to- • Q-in-Q Double VLAN
use security dashboards that automatically priori-
McAfee Network Security Manager
tize events based on alert severity and relevancy.
•Tiered management, up to 1,000 sensors
McAfee Network Security Platform integrates with
McAfee ePO software to give your organization a
• User authentication
consolidated view of risk and compliance across (Radius, LDAP, and TACACS)
the entire enterprise, including up-to-the-minute • Automated failover and fail-back
assessments of at-risk infrastructure based on • Disaster recovery of critical configuration data
system vulnerabilities, network defenses, and • Centralized, hierarchical policy management
endpoint security levels.
Network Security Platform Specifications

10 Gigabit Ethernet Connectivity

Sensor Hardware M-8000 M-6050 M-4050 M-3050 M-2950 M-2850 M-1450 M-1250
Components
Performance
Real-World Throughput 10 Gbps 5 Gbps 3 Gbps 1.5 Gbps 1 Gbps 600 Mbps 200 Mbps 100 Mbps
Maximum Throughput (UDP Up to 20 Gbps Up to 10 Gbps Up to 4 Gbps Up to 2.5 Gbps Up to 1.5 Gbps Up to 1 Gbps Up to 300 Mbps Up to 150 Mbps
1512 Byte Packets)
Maximum Concurrent 4,000,000 2,000,000 1,500,000 750,000 750,000 750,000 80,000 40,000
Connections
TCP Connections per Second 250,000 125,000 75,000 38,000 31,500 20,800 8,300 4,150
HTTP Connections per Second 120,000 60,000 36,000 18,000 15,000 10,000 4,000 2,000
Throughput with SSL Decryption 8.8 Gbps 4.4 Gbps 2.7 Gbps 1.3 Gbps 900 Mbps 500 Mbps N/A N/A
(based on 10% SSL traffic)
Maximum SSL Flow Count 400,000 200,000 150,000 75,000 25,000 25,000 N/A N/A
SSL Keys Imported 256 256 256 256 256 256 N/A N/A
Typical Latency Less than 100 µs Less than 100 µs Less than 100 µs Less than 100 µs Less than 100 µs Less than 100 µs Less than 100 µs Less than 100 µs
Number of Virtual IPS Systems 1,000 1,000 1,000 1,000 100 100 32 16
Maximum DoS Profiles 5,000 5,000 5,000 5,000 5,000 300 120 100
ACL Rules 1,000 1,000 1,000 1,000 1,000 400 100 50
Ports
Fixed Gigabit Ethernet—Copper — — — — 8 8 8 8
Ports (internal fail-open)
SFP Gigabit Ethernet Ports 16 8 8 8 12 12 — —
10-Gigabit Ethernet 12 8 4 4 — — — —
Dedicated Response Ports (RJ45) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M)
Dedicated Management 1 (10G / 1G / 100M) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M) 1 (10G / 1G / 100M)
Ports (RJ45)
Control Ports for External 14 8 6 6 6 6 — —
Fail-Open Kits
Physical
Dimensions 2 X 2RU Rack 2 X 2RU Rack 2 X 2RU Rack 2 X 2RU Rack 2 X 2RU Rack 2 X 2RU Rack 2 X 2RU Rack 2 X 2RU Rack
Mountable Mountable Mountable Mountable Mountable Mountable Mountable Mountable
16.75 (W) x 3.05 (H) 16.75 (W) x 3.05 (H) 16.75 (W) x 3.05 (H) 16.75 (W) x 3.05 (H) 16.75 (W) x 3.05 (H) 16.75 (W) x 3.05 (H) 16.75 (W) x 3.05 (H) 16.75 (W) x 3.05 (H)
x 30.00 (D) each x 30.00 (D) each x 30.00 (D) each x 30.00 (D) each x 30.00 (D) each x 30.00 (D) each x 30.00 (D) each x 30.00 (D) each
Weight 94 lbs. (2 x 47 lbs.) 47 lbs. 47 lbs. 47 lbs. 40 lbs. 40 lbs. 12 lbs. 12 lbs.
Maximum Power Consumption 900w (2 x 450w) 450w 450w 450w 450w 450w 120w 120w
DC Power Available Optional Optional Optional Optional Optional Optional N/A N/A
Redundant Power Supply Optional Optional Optional Optional Optional Optional / N/A N/A N/A
Power 100–240VAC (50 / 60Hz)
Temperature 0° to 35° C (Operating) 0° to 40° C (Operating)
–40° to 70° C (Non-operating) –40° to 70° C (Non-operating)
Relative Humidity Operational: 10% to 90%
(Non-condensing) Non-operational: 5% to 95%
Altitude 0 to 10,000 Feet
Safety Certification UL 1950, CSA-C22.2 No. 950, EN-60950, IEC 950, EN 60825, IEC 60825, 21CFR1040 CB license and report covering all national country deviations.
EMI Certification FCC Part 15, Class A (CFR 47) (USA), ICES-003 Class A (Canada), EN55022 Class A (Europe), CISPR22 Class A (International)

2821 Mission College Boulevard McAfee, the McAfee logo, McAfee Global Threat Intelligence, McAfee GTI, ePolicy Orchestrator, McAfee ePO are registered trademarks or
Santa Clara, CA 95054 trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other marks and brands may be claimed as the property
888 847 8766 of others. The product plans, specifications and descriptions herein are provided for information only and subject to change without notice,
www.mcafee.com and are provided without warranty of any kind, express or implied. Copyright © 2013 McAfee, Inc. All rights reserved.
60043ds_m-app_0313_fnl_ASD