Chapter 4 Deployment Scenarios; Deployment Flexibility; Deployment Scenario For Beginners - McAfee M-1250 - Network Security Platform Deployment Manual

C 4
H A P T E R
Deployment Scenarios
This section provides some guidance on how to deploy McAfee
Platform using the most simple, or out-of-the-box method, and then gear up to more
complex scenarios.

Deployment flexibility

IPS deployment can be daunting, and a complex product can be difficult to integrate
initially. Network Security Platform, while complex, provides great flexibility in deployment
so you can start monitoring your network even while you familiarize yourself with its
features and capabilities and tune your security policies.
McAfee Network Security Platform deployment can be simple or complex, depending on
your needs and your skill with the product. If you are a
Security Platform straight out of the box and get your entire deployment up and monitoring
in an extremely short period of time. An
policies a bit and shift to another operating mode, such as Tap mode. An
might use all of the features available, tracking traffic at extremely granular levels, creating
multiple administrative domains managed by a variety of users with various privileges,
tailored policies and custom responses to detected attacks, and so on.

Deployment scenario for beginners

Network Security Platform includes a variety of pre-configured security policies targeting
different environments. These policies (defined in Working with Network Security Platform
Resources,
Details on how to accomplish these tasks, unless otherwise specified, are described in
Administrative Domain Configuration Guide
1 Install the Manager as described in
Default Inline IPS
2 The
pick the policy that best matches your needs. McAfee
(Sensors) you add will inherit this policy and pass it along to all interfaces of the
Sensor.
Note:
deployment Sensors will begin blocking these attacks when they are detected.
Intermediate
Getting Started Guide
) enable you to start monitoring your network right away.
.
policy is specified by default. You can leave this policy in place or
This policy enables blocking for certain attacks; immediately upon in-line
26
®
Network Security
Beginner
, you can use Network
approach might be to customize your
Installation Guide
.
®
Network Security Sensors
Advanced
user