ArcSight ServicesBrief McAfee HIPS

Services Brief

ArcSight ESM and McAfee HIPS Integration Service Highlights: • Gain real-time visibility into the prevalence of spoofing and phishing attacks across the enterprise

• Monitor user activity in conjunction with suspect or blacklisted environments, both internally and externally

• Achieve faster time to problem resolution

• Alert the security operations center and confine phishing attack effectiveness through rule correlation with ArcSight ESM

• Understand the relevance of user behavior and adjust organizational monitoring accordingly

The ArcSight ESM and McAfee Host Intrusion Prevention System (HIPS) Integration service enables customers to better ascertain the behavior of users based upon identity correlation. Service Overview The ArcSight ESM and McAfee HIPS Integration service enables organizations to gain better visibility and control over user behavior that may introduce vulnerabilities into the enterprise. By using ArcSight Global Services to integrate the McAfee solution with ArcSight ESM, organizations will be better suited to identify and manage the risk associated with email spoofing and phishing attacks, which are rapidly increasing in sophistication and number.

Service Objectives The ArcSight ESM and McAfee HIPS Integration service will improve the ability to identify suspicious user activities that introduce risk into the organization. Through the power of the ArcSight ESM correlation platform, user activity can be monitored to prevent the success of phishing attacks that may introduce harmful scripts or breach sensitive organizational systems or data (see Figure 1).

Contact ArcSight Global Services To find out more about the ArcSight ESM and McAfee HIPS Integration service and other service offerings, contact your sales representative or an ArcSight global services consultant today at +1 888 415 ARST.

About ArcSight Global Services ArcSight Global Services has successfully deployed more instances of SIEM technology than any other organization in the world. From the smallest implementations to the most complex application and infrastructure environments, ArcSight Global Services can help customers quickly turn their enterprise threat and risk management investments into tangible results. By leveraging the best practices and the in-depth experience of the ArcSight Global Services team, enterprises can learn how to optimize their security technology investments, understand the key factors for success, and develop a plan

Services Brief: ArcSight ESM and McAfee HIPS Integration Service

Figure 1: The ArcSight and McAfee integration decreases the probability of phishing attack success.

to meet the organization’s security and compliance needs. ArcSight Global Services offerings address all solution phases, from initial product installation to long-term maturity, ensuring that organizations are getting the best capability and performance from their SIEM environment. ArcSight Global Services are trusted by hundreds of leading organizations and government agencies around the world. For more information, visit www.arcsight.com/services.

About ArcSight:

ArcSight, an HP company, is a leading global provider of cybersecurity and compliance solutions that protect organizations from enterprise threats and risks. Based on the marketleading SIEM offering, the ArcSight Enterprise Threat and Risk Management (ETRM) platform enables businesses and government agencies to proactively safeguard digital assets, comply with corporate and regulatory policy and control the internal and external risks associated with cybertheft, cyberfraud, cyberwarfare and cyberespionage. For more information, visit www.arcsight.com.

ArcSight, Inc. www.arcsight.com [email protected] © 2011 ArcSight, Inc. All rights reserved. ArcSight and the ArcSight logo are trademarks of ArcSight, Inc. All other product and company names may be trademarks or registered trademarks of their respective owners. ARST-SB010-080210-04