Download - Tough Times. Tough Choices
Tough Times. Tough Choices.Security-as-a-Service is the right choice, right now.
White Paper
White Paper Tough Times. Tough Choices.
Table of ContentsA New Choice for Every Business: Security-as-a-Service 3
Security-as-a-Service: One Service, Countless Protections 4
Outsource Your Security Management to the Industry’s Experts 5
McAfee SaaS Endpoint Security Suites: Managed Security You Can Trust Today 5
McAfee Innovation Makes Outsourcing Security an Easy Decision 6
McAfee SaaS Endpoint Security Suites: The Right Choice, Right Now 6
The McAfee Advantage: Choice 7
White Paper Tough Times. Tough Choices.
Why Security-as-a-Service?
Greater Return on Investment•Gain faster time to value•Reduce total cost of ownership
Less Risk •Focus on securing business, not
managing software•Unburden IT resources
Inthewakeoftheeconomicdownturn,companiesofallsizesfacecutsinbudgetsandstaff.Thesetighttimesnecessitatetoughchoices.Onewayorganizationscanreducecosts—whileactuallymaintainingorevenupgradingtheirsecurity—istoswitchtoMcAfee®Security-as-a-Service.McAfee®SaaSEndpointSecuritySuitesdeliverthesafeguardsthattoday’sthreatsdemand,whiletrimmingboththeupfrontanddailycostsofstayingprotected.Whatdoesthismeanforyou?Youcannowchoosetofocusonotherbusinesspriorities,knowingyouhavetheindustry’sexpertsfocusedonyoursecurity.
Today,everybusinessisfeelingtheimpactofthelaggingeconomy,lookingforopportunitiestodefercosts,cutcorners,andekeoutmorevaluewitheverydollarspent.Facedwithtoughbudgettradeoffs,businessesareevenscrutinizingtheirsecurityforcostsavings.
WhetheryouareanITmanager,anITgeneralist,orasecurityspecialist,chancesareyouarerethinkingassumptionsaboutwhatsecuritysolutionstobuy,howtoimplementthem,andevenhowtomanagethem.Yourexistingrequirementistosustainor,betterstill,enhanceprotectionagainstmalware,spyware,spam,andthemyriadotherintrusionsandvulnerabilitiesthatthreatenpreciousinformationandsystems.Yournewrequirementisformoreefficiencyandmoreseamlessprotection,withlessthoughtandeffort.
A New Choice for Every Business: Security-as-a-ServiceThesolutiontothisdilemmaiseasierandsaferthanyouthink:Security-as-a-Service.Regardlessofwhetheryouhavethebenefitofextensivesecurityexpertisein-house,thisprovenmanagedserviceapproachcanhelpyoumaintainandevenincreaseprotection,whileminimizingcosts.Itisasafebettodayforallsizesoforganizations.
Security-as-a-Serviceprotectsyourbusinessbyautomatingyoursecurityprocesses,includingongoingsignatureandfeatureupdates,toslashyourongoingcostofsecurityownership.Itmanagessecurityoperationsandequipmentoffsite,whichreduceson-sitecostsforadministrativehardware,software,andadministration.Asubscriptionapproacheliminatesupfrontcapitalexpenses,andtheservicemodelcanmakethewholeexperiencepracticallyinvisibletoyourusers.
One-year contract
$2,374
$10,000
$8,000
$6,000
$4,000
$2,000
$0
1X
Tota
l cos
t of
owne
rshi
p in
USD
2.3X2.6X
Total Cost of Ownership (TCO) of EndpointProtection Solutions for SMB (50 Users)
Security-as-a-Service vs. Traditional Software Solutions
$5,520$6,255
McAfee Security-as-a-Service
Traditional Vendor A
Traditional Vendor B
Source: The Tolly Group, December 2007
According to the Tolly Group, integrated Security-as-a-Service offers better TCO than traditional on-premise security.
White Paper Tough Times. Tough Choices.
Becauseitmovestheday-to-daymaintenancetoadedicatedoperationscenterrunbyspecialistsinsecurityandavailability,itallowsyoutoremainfocusedonyourcorebusinessrequirements,withtheconfidencethatyouhaveexpertsmanagingyoursecurity,constantlyandconsistentlyapplyingtheultimatebestpracticesandlatestdefensessoyourprotectionisalwaysonguardanduptodate.
Security-as-a-Serviceisnotsomepie-in-the-skydream.ItreallydoesmakesolidfiscalandITsense.Yourealizethecostsavingsinitiallyinyourupfrontcosts:fewervendors,fewerproducts,lessmanagementtime,andnoextrachargeforsupport.Then,lateron,thereisonlyonerenewalexperience.
Security-as-a-Service: One Service, Countless ProtectionsAlthoughyoucanpurchasespecificmanagedserviceofferingsthatperformanti-spam,anti-virus,orvulnerabilitymanagement,themostcost-savingscomewiththeconsolidationofanintegrated,multi-functionapproach:oneservicewithmanyprotections,includingalloftheseandmore.
AunifiedSecurity-as-a-Serviceexperienceletsyouappreciatethemaximumcostsavingsthroughintegrationandautomation.ArecentpollbyMSIfoundthatover30percentofadministratorsusedfiveormoremanagementconsoles.1Integratedmanagement—whetheritisonsiteorasanoutsourcedservice—reducesthisplethoraofconsoles.Thatmeanssecurityiseasiertoimplementandeasiertomanage.Evenbetter,youfinditmuchfastertorespondwhensomethinggoeswrong.
Beyondtheadministrativecomplexity,somestandaloneproductsrequireaseparatehardwaresystemtoruntheadministrativeserver,socuttingdownmanagementtoolswithasingleintegratedsystemfurtherreduceshardware,maintenancecosts,andstaffingrequirements.
ThesameMSIresearchalsorevealedthatadministratorswhomanagesecurityonsitespendmoretimeonallendpointsecurityfunctionsthanmanagedserviceusers.Whilesomeofthesetasksareimportantforcustomizedprotections,policies,andprocesses,Security-as-a-Servicegivesyouachoice—thechoicetoreducecomplexityandspendyourtimeonotherbusinesschallenges.
Mitigating an infectionor outbreak
Developing infrastructure tosupport new software
Deploying new softwareor upgrades
Maintaining anexisting solution
Training employees
Configuringsecurity policies
Compiling securityreports for analysis
McAfee SaaS Endpoint Protection Users
Non-Hosted
2.37
2.70
2.22
2.65
1.53
1.27
1.18
1.08
0.70
2.07
2.37
2.23
2.27
1.85
Average # of Hours Spent Per Event
Customers using McAfee SaaS Endpoint Security Suites spend less time training users, maintaining software, and generating reports than those with on-site software.
Source: MSI International Survey, 2009.
1. MSI International Survey, 2009.
White Paper Tough Times. Tough Choices.
Outsource Your Security Management to the Industry’s Experts Whenyouleverageourservice,westreamlinetime-consumingsecuritytasks.Maintenanceistakencareofbyexperts.Policiesarepre-configuredwithbestpractices,soyoucanchangethem,butyoudon’thaveto.Theend-userexperienceissosimpletrainingisn’trequired,andourwebmanagementsystemmakesiteasytounderstandsecurityeventsandgeneratemeaningfulreports.Yourserviceisalwaysworking,alwaysavailable,alwayscurrentwiththemostappropriateprotections—andyouspendnotimeplanningforsecurity,software,orhardwareupdates.
Youwouldn’taskanaccountantforadviceconcerningyouryard;youwouldturntoagardenerorland-scapeexpert.Sowhyleaveyourbusinesssecuritytoanyonewhoisn’tproficientinthreatmanagement?Security-as-a-Serviceenablesyoutofocusonyourbusiness,whileexpertsfocusonyoursecurity.
IT Admin 1at Headquarters
IT Admin 2at Branch Office
A B CD E
A D
VS.
Single Management ConsoleAvailable 24/7 Online
Multiple Management Consoles,Administrators, and Locations
EC
B
With McAfee, unified management replaces isolated management systems with one integrated, streamlined dashboard.
McAfee SaaS Endpoint Security Suites: Managed Security You Can Trust TodayWhenitcomestoSecurity-as-a-Service,McAfeeisthenameyoucantrust.Forwelloveradecade,wehaveinvestedexclusivelyinsecurityproductsandservices.Andforthedecade,wehavecontinuedtohoneandenhanceSecurity-as-a-Service.Infact,wewerethefirsttoprovideanintegratedmulti-functionSecurity-as-a-Service,inpartbecausewewerethefirsttounderstandtheefficiencyvalueandsecuritypayoffofvisibilityacrossprotections.WithourMcAfeeSaaSEndpointSecuritySuites,McAfeeoffersthreesecuritysolutionstoprovideintegratedprotectionthatextendsseamlesslytomatcheachnewthreat:
McAfee SaaS Endpoint Protection
Suite
McAfee SaaS Endpoint Protection
Advanced Suite
McAfee SaaS Endpoint and Email
Protection suite
McAfee SecurityCenter, for centralized visibility through an online management console P P P
Desktop and file server anti-virus and anti-spyware to scan and block out malware P P P
Desktop firewall to block hackers and intrusions P P P
Web security for safe surfing P P P
Web filtering to block unwanted websites P PEmail server protection to scan for viruses and spam in house P P
Email scanning to stop malicious spam and phishing attacks in the cloud P
Vulnerability assessment to scan for perimeter weaknesses P
White Paper Tough Times. Tough Choices.
Fromitsinception,McAfeeSaaSEndpointSecuritySuiteshavebeenamulti-functionservice,includinganti-virus,anti-spam,andanti-spyware.Overtheyears,we’veextendedthissecuritysystemtoincludewebsecurity,firewall,vulnerabilityassessment,andadditionallayersofemailprotection.Nowyoucanblockanddefeatviruses,spyware,adware,spam,phishing,hackerattacks,Web2.0exploits,andotherthreatsbeforetheycancompromiseyoursystemsorstealyoursensitivedata.Youcanwarnusersaboutriskysurfingandletthemsearchandsurfsafely.Inaddition,weoffercost-effective,accreditedoptionsforcompanieswhoneedtocomplywiththequarterlyscanningrequiredbyPCIDSS.
WithourSecurity-as-a-Service,asthreatsblendandchangeinrealtime,weenvelopyouintheprotectionyouneedinrealtime,maintainingcutting-edgesecurityacrosstheboard.HavingSaaSEndpointSecuritySuitesarelikeasecuritywindfall:thesolutionsexpandprotectionbutreducetheimpactonbudgets,administrators,andendusers.Yougetreal-timeprotectionwithinstant,always-onaccess,allforonesimplesubscription-basedprice.
Thatcombinationaddsuptotruepeaceofmind.
McAfee Innovation Makes Outsourcing Security an Easy DecisionOfcourse,thevalueofSaaSEndpointSecuritySuitesarequantifiedinitslowcostofownership.TheMcAfeeSaaSsolutionsrequirenocapitaloutlayandareanaffordable,predictablecost.Thesolutionsprovidecomplete,integrated,always-on-guardprotectionwitheasymaintenanceandwithoutonsiteactivity.Infact,arecentTollyReportfoundthatMcAfeeSaaSEndpointProtectionhasatotalcostofownershiplessthanhalfthepriceofitscompetition.
Beyondprice,however,McAfeedifferentiatesSaaSEndpointSecuritySuitesfromtraditionalproductsinthreedistinctareas:
1. One service—Wewerefirsttoofferanintegratedsecuritysolutionmanagedbyasingleconsole.Youdon’thavetoworryaboutmaintainingmultipleservicesfrommultiplevendors,andyoueliminatecoveragegapsthatcanletthreatsin.SaaSEndpointSecuritySuitescoverthethreatsyouneedtoday,and,asasubscriptionservice,thesolutionswillbringyounewprotectionsasneededwithinthesamefamiliarenvironment.
2. Anywhere management access—McAfeemanagestheinfrastructureandprovidesaneasy-to-useweb-basedmanagementconsole,McAfeeSecurityCenter,togiveyoueasyaccesstotheinformationyouneed.Fromanylocation,administratorscanaccessreportsandpoliciesstoredattheMcAfeeNetworkOperationsCenter.
3. Always-on-guard protection—McAfeeappliesmulti-vector,real-timeprotectionagainstthemostdynamiconlinethreats,with24/7coverage.OuradvancedGlobalThreatIntelligencecorrelatesmillionsofdatapointsacrossallmajorvectors,allowingustoassessandpredictbreakingthreats,blockthem,andprotectyouinadvanceoftheattackorexploit.Wedistributethreatupdatestoyourusersautomatically.Tominimizenetworktrafficandpotentialdelays,ourspecialRumortechnologyletsupdatespropagatebetweennetworkpeers.
McAfee SecurityCenter: Strong security made simple•All security in a single window—
no separate downloads, no separate displays
•Startup is easy: a single URL click, a few options to set, and protections are on by default, preconfigured for best practices
•End-user installation takes one click by a user to install a small agent that works with all of our protections
•Predefine policies for groups, then add new users with a simple click
• If you want to go beyond set-and-forget simplicity, choose from a range of policy options and views
•Customize your personal dashboard with the information and tasks you want to see, arranged with drag-and-drop ease
•Reports are stored up to a year•SecurityCenter works in a web
browser, so if you have an Internet connection, you have access, 24x7
•Maintenance and administration systems are all managed by McAfee
Use web-based management to monitor your security as much or as little as you need to.
McAfee, Inc. 3965 Freedom Circle Santa Clara, CA 95054 888 847 8766 www.mcafee.com
McAfee and the McAfee logo and/or other noted McAfee related products contained herein are registered trademarks or trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other marks and brands may be claimed as the property of others. The product plans, specifications and descriptions herein are provided for information only and subject to change without notice, and are provided without warranty of any kind, express or implied. Copyright © 2010 McAfee, Inc. 9296wp_saas_tough-times_0410_fnl_ASD
White Paper Tough Times. Tough Choices.
McAfee research protects you better, faster through global threat intelligence that correlates events across the major threat vectors.
ImplementationofSaaSEndpointProtectioniseasy,andmaintenanceiseffortless.Wemovetheburdentoourpremises,andautomateasmanytasksaspossible.Yousetupafewpolicies,thenprotectionstartswithasingleclickonasingleURLbyeachuser.Wetakeitfromthere.Eachuser’ssingleendpointagentautomaticallycallsandpullsdownupdatesatfrequentintervalstoprotectuserswiththelatestsignatures,policies,andfeatureupdates.Weprideourselvesonaddingmorepotentprotectionswithinthesameconsistent,stringentenvironment.Thatmeansnodisruptivechangesforuserswhileprotectionskeeppacewiththreats.
McAfee SaaS Endpoint Security Suites: The Right Choice, Right NowIfyouarelookingtotrimyourITbudgetbutmaintainappropriatesecurity,McAfeeSaaSEndpointSecuritySuitesaretheeasysolutionandtherightchoice.Thesolutionsintegrateallthesecurityfunctionsyouneedtoprotectyourusersandyourbusinessandcutsthecostofsustainingprotectionthroughstreamlined,flexiblemanagement.OnlyMcAfeeprovidesthebenefitsofasinglevendor,consolidatedlicensing,andone-stopsupport.
The McAfee Advantage: ChoiceWhileSecurity-as-a-Serviceisanapproacheverycompanyshouldconsider,weknowcompaniesneedoptions—whethertoenabledifferentbusinessopportunities,differentbusinessunits,ordifferentusercommunities.TheextensiveMcAfeeportfolioletsyouchoosethesecurityapproachthatmatchesyourneeds–withoutsacrificingsecurityorsavings.Selectfromavarietyofimplementationmodels:softwareonly,turnkeyappliances,ormanagedservices.Thenasyoursecurityneedschange,youcanadjustyourprotectionandleverageyourbuyingpowerandatrustedrelationship.
Don’tallowtoughtimestokeepyoufromthesecurityandprotectionyouneed.McAfeeistherightchoice,rightnow.Learnmoreatwww.mcafee.com.
McAfee Customers• 50M enterprise nodes• 100M consumer nodes
Web Security Research• Rated over 30 million sites classified in over 96 categories• Over 200,000 zombies identified per day
Email Security Research• Over 10 billion messages every month
Vulnerability Research• 100 sources monitored daily• 20 vulnerabilities discovered
Malware Research• 50,000 samples/day• 1.5M malware detections in 2008
Network Security Research• 10M IPS alerts monitored/ analyzed daily• 1000T traffic monitored/ analyzed daily
RegulatoryComplianceResearch
Internet
GLOBAL THREAT
INTELLIGENCE
Global ThreatIntelligence