Service Updates and Enhancements

Transcription

1 Service Updates and Enhancements May 8, 2013 McAfee understands that providing the tools for a trusted communication environment is our primary directive. Accomplishing this goal requires listening to our partners and customers and setting our development roadmap to reflect these needs as well as proactively driving the evolution of superior online protection and service. The result of these ongoing efforts is the latest series of user experience improvements and feature enhancements to our cloud-based security services. Please note this enhancement document is not intended to be a complete representation of all enhancements or changes made to McAfee SaaS Web Protection, McAfee SaaS Protection, or McAfee SaaS Archiving products. See product documentation for full disclosure following the quarterly release. Additionally, in this release, we are introducing a new product to the SaaS environment - McAfee Cloud Single Sign On. This product is available as of Q and shares the same management console as the products listed above. See below for more information. To help you navigate the changes to the McAfee Control Console that are taking place with this release, McAfee Cloud Education Services has posted a complimentary elearning module and associated update guide to the Learning Management System. This recorded tutorial, entitled elearning (update) Control Console Delta, May, 2013, identifies in detail the changes made in the control console. This tutorial is the primary source of enhancement and adjustment explanations made to the control console in addition to the product documentation. This replaces what was historically provided in an enhancement document, allowing for more accurate and thorough information to be shared. You must log in to register for these courses. If you have not used this service before, please send an to training@mcafeesaas.com to request an ID. Supported Browsers The following browsers and related operating systems will be supported in this release: Internet Explorer 10 (Windows 8, Windows 7) Internet Explorer 9 (Windows 7, Windows Vista) Firefox (OS X 10.8, OS X 10.7, Windows 8, Windows 7, Windows Vista, Windows XP) Chrome (OS X 10.8, OS X 10.7, Windows 8, Windows 7, Windows Vista, Windows XP) Safari 6* - (OS X 10.8, OS X 10.7) *SaaS Web Protection end users only.

2 McAfee SaaS Language Support Updated language support in context of the product or function: Language Admin Console (UI) Quarantine Reports Continuity Encryption Archiving (Admin and End User) Cloud SSO (Admin and End User) Message for Blocked Web pages English Spanish French (European) Chinese (Simplified) Chinese (Traditional) Danish Dutch German Finnish Italian Japanese Korean Norwegian Portuguese (Brazilian) Portuguese (European) Russian Swedish Turkish

3 McAfee SaaS Account Management Batch User Management Update Customer Administrators and above now have the ability to batch edit user values such as password and status, providing more efficient account management for multiple users. User Record Download Customization Admins can now choose the fields for which they would like to download user record data, which include all available attributes that can be used in a batch update. This customization makes it easier to create a batch update based on a custom set of attributes. Fig. 1 Customized Content for User Record Download

4 McAfee SaaS Protection Service ClickProtect Organizations now have stronger protection from threats originating from URLs within messages, which are common lead-ins to phishing attacks, APTs, and malware infections. This protects users from a potential change in URL intent between the time a message is scanned (scantime) and the time a URL is clicked (click-time). ClickProtect protects users with: URL reputation checks at scan-time URL reputation re-checks at click-time URL emulation and full malware scanning which leverages McAfee s Web Protection technologies, including McAfee s proactive Gateway Anti-malware scanning engine. This loads the website behind the URL in a cloud-based environment to scan for malware. In addition, all scan-time, click-time, and malware scan events are logged in Message Audit to give administrators visibility, traceability, and justification for policy changes for URL filtering policies. Fig. 2: Policy based configuration options for Scan-time and Click-time actions based on risk level, and options to enable and configure advanced antimalware scanning at Click-time.

5 Fig. 3: User Interface at click-time if ClickProtect and advanced anti-malware scanning is enabled Fig. 4: User Interface at click-time if advanced anti-malware scanning and Display a preview before allowing the user to continue to the website are enabled. This enables user judgment as an additional layer of checking on whether it is the page they were expecting to display.

6 Fig. 5: Message displayed if advanced anti-malware scanning is enabled and malware is detected on the page a user is trying to access via a URL (click-time) within an message. Blocks malware by preventing access to the page. Fig. 6: Message displayed when the reputation of the URL is High Risk (at click-time) and it has been blocked by the filtering policy. Prevents malware by blocking access to the site at click-time. Please note: Users must have Message Audit enabled in order to see the message ID typically shown in a ClickProtect page. The new ClickProtect warning message capabilities are now more comprehensive and granular, and come with a new default message. If you have a custom warning message defined, this will be overwritten by the new default, and may be further customized.

7 Spam Reporter Scheduler for End Users Administrators now have the ability to delegate to their end users the ability to independently select their spam report delivery times with the flexibility of delivery up to 2x per day. Fig. 7: End user interface for Spam Reporter Scheduler Regional Awareness of MX Record screen In the setup tab, customers can indicate the region in which mail should be processed (for more details, please see the MX record options in the Setup Guide). This causes the MX records screen to display information relevant for the selected region, as MX records for each region are unique. The region selected is automatically retained by the McAfee SaaS service. Fig.8: Interface for regional awareness for MX records

8 McAfee SaaS Archiving SaaS Archiving has been available in North America, EMEA (data centers located in London and Amsterdam) and ANZ (data centers in Sydney and Auckland), but is now also available in APAC (data centers Japan and Hong Kong). Customers may self-select the region of choice in which they want messages archived. Fig. 9 Storage Configuration Screen will include the new APAC data storage location

9 NEW! McAfee Cloud Single Sign On, SaaS Edition New as of the May 2013 Introducing McAfee Cloud Single Sign On - an identity-as-a-service solution providing single sign-on to hundreds of popular SaaS applications for greater end-user convenience and productivity, reduced or eliminated password reset calls to the application administrator, and, since passwords are notoriously insecure, improved security. SaaS Application Single Sign-On Administrators can use the Control Console to configure and assign user access rights to hundreds of software-as-a-service (SaaS) applications, such as Salesforce, Google Apps and many more. Users who have been assigned access rights to one or more applications can access a dynamically generated single sign on (SSO) portal page (Fig. 9), where they will see icons representing the applications they are authorized to access. All the user needs to do is click on the application icon to log in without needing to re-enter a user ID and password. Two types of SSO are available: SAML - federated SSO with token exchange based on the Security Assertion Markup Language HTTP POST form-based SSO with a user ID/password combination captured, encrypted, vaulted and replayed transparently to the user. Fig. 10 Sample End-user SSO Portal Configure SaaS Application Connectors The administrator can configure the target application connector (Fig. 11), based on the type of SSO supported, enforce strong authentication, and restrict access to users based on their IP address (Fig. 12).

10 Fig. 11 Control Console: Edit Connector Fig. 12 Control Console: Restrict Access SaaS Application Provisioning/ De-provisioning Administrators have the ability to provision and de-provision SaaS accounts for cloud application users. There is no change to user provisioning/de-provisioning for Control Console users. Provisioning reduces the time and effort required to onboard a new user, while de-provisioning eliminates the ability of the user to access the SaaS application when they are no longer with the organization.

11 Multi-Factor Authentication One of the biggest concerns organizations have when they outsource identity to the cloud is security. McAfee Cloud Single Sign On includes multi-factor authentication, based on McAfee One Time Password, to address this concern. The administrator can protect a SaaS application by requiring the user to enter a one-time password (OTP) in order to be authenticated to the application. Users can download the Pledge application to their desktop, and retrieve their OTP from the application when challenged to enter the OTP. Deployment Options McAfee Cloud Single Sign On, SaaS Edition will be available by either an annual or monthly subscription. The subscription price will be based on the number of user licenses acquired. Please contact your McAfee Account Executive for further details McAfee, Inc. All rights reserved.