McAfee VirusScan Enterprise 8.8 Patch 3
McAfeeВ®
VirusScanВ® Enterprise protects your desktop and file servers from a
wide range of threats, including viruses, worms, Trojan horses, and
potentially unwanted code and programs. McAfeeВ® VirusScanВ® 8 takes
anti-virus protection to the next level, integrating elements of
intrusion prevention and firewall technology into a single solution for
PCs and file servers. This powerful combination delivers truly proactive
protection from the newest of today"s threats-including buffer -
overflow exploits and blended attacks - and features advanced outbreak
management responses to reduce the damage and costs of outbreaks.
Everything is managed by McAfee ePolicy OrchestratorВ® or
ProtectionPilotв„ў for scalable security policy compliance and graphical
reporting.
Key benefits:
- Integrated firewall and IPS
technology - Addition of firewall and intrusion prevention technology
delivers maximum proactive protection in a single, integrated package
-
Enhanced coverage for emerging threats - VirusScan provides protection
from the newest potentially unwanted program security threats (e.g.,
spyware), application-specific buffer overflow attacks, and blended
attacks
- Lowered TCO during outbreak response - Advanced outbreak
functionality closes the window of vulnerability before DAT files are
available, limiting damage by blocking the entrance and spread of the
outbreak
- McAfee scanning technology - Award-winning McAfee scan
engine performs in-memory scanning to block threats such as Netsky and
CodeRed, which don"t write their code to disk
- Centralized
management and reporting - Integration with McAfee ePolicy Orchestrator
and ProtectionPilot provides a complete security management solution,
including detailed graphical reporting, from a single console
Features:
- Comprehensive McAfee anti-virus protection
- Potentially unwanted program security
- Buffer overflow prevention (IPS feature)
- Complete outbreak response
- Port blocking/lockdown (firewall feature)
- Application monitoring: email engines (firewall feature)
- File blocking, directory lockdown, folder/share blocking (IPS feature)
New features in v8.7i:
New and updated features in the current release of the software:
- Support for Microsoft Windows Server 2008
- Architectural changes:
в—Џ
Better rootkit detection and cleaning without system restart - Safe
memory patching, better IRP repair support at the system core, and the
ability to read locked files at the kernal level provide better rootkit
detection and the ability to clean detections without restarting the
system.
в—Џ On-access scan performance improvements during system
startup - A new boot cache process improves on-access scan performance
during system startup.
в—Џ Greater self-protection - The
self-protection feature has been enhanced to protect against a wider
range of mal-processes that can terminate McAfee processes. This
provides greater VirusScan Enterprise self-protection and product
stability.
- Real-time malware protection:
в—Џ This feature uses
sensitivity levels that can be configured, based on your risk tolerance,
to look for suspicious files on your endpoints that are running
VirusScan Enterprise 8.7i.
в—Џ When enabled, this feature detects a
suspicious program and sends a DNS request containing a fingerprint of
the suspicious file to McAfee Avert Labs, which then communicates the
appropriate action back to VirusScan Enterprise 8.7i.
в—Џ The real-time defense feature also provides protection for classes of malware for which signatures might not be available.
в—Џ
This protection is in addition to the world-class DAT-based detection
VirusScan Enterprise has always provided. The user experience remains
the same and no additional client software is required.
в—Џ In this
release, this feature is available only for on-demand scans and email
scanning and is disabled by default. You must select a sensitivity level
to enable the feature.
- Performance improvements:
в—Џ New scan
deferral options improve local control of on-demand scans, including the
ability to defer scans when using battery power or during
presentations. One option can be configured to allow end users to defer
scheduled on-demand scans for the increment of time you specify. You can
specify hourly increments up to twenty-four hours, or forever.
в—Џ Enhanced system throttling now includes registry and memory scanning in addition to file scanning.
- Improved email scanner
- Buffer overflow protection exclusions by API
- On-access scanner - Scan processes on enable
- On-demand scan usability improvements:
в—Џ Clean - Report and clean the detection.
в—Џ Continue - Report the detection and continue scanning.
