Data Sheet

McAfee VirusScan Enterprise
Protect your desktops and file servers from malicious threats Keeping networks free from a wide range of threatsviruses, worms, rootkits, and Trojansis more challenging than ever. Whether your organization is a global enterprise with full-time security staff or a small or mid-sized business, McAfee VirusScan Enterprise ensures that your endpoint servers, desktops, and laptops remain malware free.
McAfee VirusScan Enterprise proactively stops and removes threats, extends coverage for new security risks, and reduces the cost of managing outbreak responses. And even without an update, it stops zero-day threats and mitigates the window of vulnerabilitythe time between the discovery of a vulnerability and when fixes are deployed. Plus, with McAfee VirusScan Enterprise, you have the flexibility to detect and block malware based on your business needs: on access, on demand, or on a schedule. Unbeatable Malware Detection and Cleaning McAfee VirusScan Enterprise uses the awardwinning McAfee scanning engine to detect and clean malware and protect your files from viruses, worms, rootkits, Trojans, and other threats. McAfee delivers comprehensive findand-fix solutions for todays threats and uses behavioral analysis to protect against new and unknown threats. Protect your systems with McAfee VirusScan Enterprises advanced behavioral techniques. With port blocking, file-name blocking, folder/directory lockdown, file share lockdown, and infection trace and block, you can stop many new and unknown malware files cold. Proactive Protection from Attacks McAfee VirusScan Enterprise is the industrys first anti-malware software to offer patented intrusion prevention with application-specific buffer-overflow technology. Now you can protect your users proactively against buffer-overflow exploits that target vulnerabilities in Microsoft applications, and you can enjoy a more robust, advanced level of endpoint system security by integrating your anti-malware technology with intrusion prevention. With McAfee VirusScan Enterprise, your critical servers and data are kept intact and available for business. For added protection, we lock down McAfee VirusScan Enterprise files and services so that malicious threats and attacks dont disable them. Optimized for Fast Performance and Reduced System Impact McAfee VirusScan Enterprise has been designed to reduce system impact while scanning for threats. Its new persistence caching technology dramatically improves both on-access and on-demand scanning. With a reduced memory footprint and faster boot times, users will have lower power requirements than prior versions. McAfee Global Threat Intelligence Technology Provides Real-time Security McAfee Global Threat Intelligence (McAfee GTI) offers the most comprehensive protection services in the market. With visibility across all key threat vectorsfile, web, email, and networkand a view into the latest vulnerabilities across the IT industry, we correlate real-world data collected from millions of sensors around the globe and deliver real-time protection via our suite of McAfee security products. McAfee GTI works anytime, anywhereat home, at work, or on the road.
Key Advantages Unbeatable malware detection and removal Protect your files from viruses, worms, rootkits, Trojans, and other threats Proactive protection from zero-day attacks Proactive protection against new and unknown buffer-overflow exploits that target vulnerabilities in Microsoft applications Leverage McAfee Global Threat Intelligence (McAfee GTI) The worldwide presence of McAfee Labs enables McAfee VirusScan Enterprise to leverage protection across file, network, web, message, and vulnerability data Manage your security McAfee ePolicy Orchestrator (McAfee ePO) management platform provides centralized deployment, policy configuration and enforcement, and detailed, customizable reporting Manage quarantined files configure policies to manage and remove quarantined items

Easily

Supports
Enhanced email scanning users who are using both Microsoft Outlook and Lotus Notes

Specifications

Microsoft
Workstation: Windows 7 Home, Premium, Professional, and Ultimate (32- and 64-bit) Windows Vista Home Basic, Home Premium, Business, Enterprise, Ultimate (all x86 and x64) Windows POS 1.1 with SP3 Windows Embedded Standard 2009 Windows XP Tablet PC Edition, with SP3 Windows XP Professional, with SP2 or SP3 (x86 and x64) Windows XP Home Edition, with SP2 or SP3 Windows 2000 Professional, with SP4 with update Rollup 1

Manage Your Security Centralized management and enforcement is the key to effective and efficient protection. McAfee VirusScan Enterprise is deeply integrated into the McAfee system security management platform, McAfee ePolicy Orchestrator (McAfee ePO) software. The McAfee ePO platform provides centralized deployment, policy configuration and enforcement, and detailed reporting of McAfee VirusScan Enterprise, as well as many other McAfee security products. Easily Manage Quarantined Files Configure policies to manage quarantined items easily with the Quarantine Policy Manager. Before an on-access or on-demand scan cleans or deletes a file, it creates a backup copy of the original file and a registry value in the quarantine directory. Enhanced Email Scanning McAfee VirusScan Enterprise includes the ability to scan Lotus Notes email on client systems. It scans all Lotus Notes client email (HTML text and attachments) messages that come to the desktop. Automatic Updates Virus security products are only as good as their most recent updates. With McAfee VirusScan Enterprise, automatic daily updates ensure that your desktops and file servers are always up to date with the latest McAfee.DAT files and engines.
Protected by McAfee Labs With a global research footprint, McAfee Labs provides the most comprehensive global threat intelligence in the industry. Backed by a portfolio of more than 400 patents and a network of millions of sensors spanning the Internet, McAfee Labs delivers unparalleled protection against both known and emerging threats via a complete suite of security products. McAfee Global Professional Services and Technical Support Along with our McAfee SecurityAlliance integration partners, McAfee offers a wide variety of professional services that help you maximize your investment in security. We help you assess, plan, deploy, tune, and manage your solutions more effectively and more efficiently. Make sure that everything runs smoothly during and after installation with flexible programs from McAfee Technical Support. Our highly skilled and certified security specialists have a wealth of knowledge and resources at their fingertips and can be considered as an extension of your IT team. Learn More Visit www.mcafee.com, or call us at 888.847.8766, 24 hours a day, seven days a week.
Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft
McAfee VirusScan Enterprise Server: Windows Server 2008 Standard, Enterprise, Storage, and Datacenter Editions with Hyper-V and Non-Hyper-V Versions (x86 and x64), with R2 Windows Server 2003 Standard, Enterprise, Storage, and Datacenter Editions (x86 and x64), with SP1 or SP2 Windows 2000 Server, Microsoft Advanced Server, and Microsoft DataCenter Server with SP4

Figure 1. McAfee Global Threat Intelligence integrates real-time threat information across the six major threat vectors.
McAfee, Inc. 2821 Mission College Boulevard Santa Clara, CA www.mcafee.com
McAfee, the McAfee logo, McAfee VirusScan Enterprise, McAfee Labs, McAfee Global Threat Intelligence, McAfee GTI, McAfee ePolicy Orchestrator, and McAfee ePO are registered trademarks or trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other marks and brands may be claimed as the property of others. The product plans, specifications and descriptions herein are provided for information only and subject to change without notice, and are provided without warranty of any kind, express or implied. Copyright 2011 McAfee, Inc. 19402ds_virusscan-enterprise_0111_fnl_ASD

Whats New: McAfee VirusScan Enterprise, 8.8
McAfee VirusScan Enterprise is the McAfee flagship anti-malware solution, deployed to more than 60 million endpoints across the globe. It includes state-of-the-art technology to proactively stop and remove threats while extending protection for new security risks. The primary focus of the McAfee VirusScan Enterprise 8.8 release is to enhance the speed of malware scanning and to reduce the impact on system resources. Version 8.8 includes significant improvements in these areas:
On-demand On-access Memory Registry Battery Boot Script
scan URL exclusions interface

Added

capacity for user-defined unwanted programs
Performance Improvements File-caching performance Every file being accessed on the system is scanned by McAfee VirusScan Enterprise. If the file is found to be clean, these files are cached, and, the next time these files are accessed, they wont be scanned again because they were already in cache as clean. In McAfee VirusScan Enterprise 8.7, the scan cache was limited to one sessionin other words, once the system was rebooted, the cached files were lost and needed to be scanned and cached again, resulting in longer ODS and OAS scans. In McAfee VirusScan Enterprise 8.8, the cache is retained, even if the system is rebooted, which means the clean files in the cache dont have to be scanned again. This dramatically improves scanning time when files are repeatedly being accessed by applications, such as Microsoft Outlook or Microsoft Word. In McAfee VirusScan Enterprise 8.8, ODS now uses or shares the cache generated by on-access scanning. This greatly improves the performance of ODS scanning because now it will use the results

scanning (ODS)

scanning (OAS)

consumption scanning

In addition to significant performance improvements, key components of the product have been redesigned to provide a richer end-user experience and improve response time. Highlights of the new or enhanced capabilities include:

Support

for Microsoft Outlook 2010 integration of McAfee AntiSpyware

Complete

Enterprise
On-Demand Scan Test (with Persistent Cache)

Time in Minutes

16.00 14.00 12.00 10.00 8.00 6.00

VSE 8.7 Patch 1 (P1)

VSE 8.8

4.00 2.00 0.00

Throttle Setting:

(Default Option)

(MIME and ARCHIVE On)
Figure 1. With persistent cache, on-demand scanning has improved dramatically with all throttle settings. (Source: McAfee, Inc., November 2010)
Whats New: McAfee VirusScan Enterprise 8.8
of OAS cache to determine if files need to be scanned again or not. Similarly, the cache built by ODS for clean files will be leveraged by OAS, eliminating the need to repeat a scan of that file again. When using the persistent caching in McAfee VirusScan Enterprise 8.8, the time for an ondemand scan has dramatically decreased. Figure 1 shows a chart comparing the time (in minutes) it would take to conduct an ODS scan using version 8.7 P1 with version 8.8. Persistent caching also improves on-access scanning because all of the clean files scanned dont need to be scanned again, thus significantly improving OAS scanning. Below is a chart demonstrating how much faster (in minutes) McAfee VirusScan Enterprise 8.8 OAS scanning is compared to McAfee VirusScan Enterprise 8.7, which did not have persistent caching. McAfee VirusScan Enterprise 8.8 OAS is 84 percent faster than McAfee VirusScan Enterprise 8.7 because of persistent caching.

Memory Usage During ODS

(with Cache Persistence)
140.00 120.00 100.00 80.00 60.00 40.00 20.00 0.00

FULL SCAN

131.79
Performance testing methodology McAfee conducted thorough in-house testing to document performance improvements in version 8.8. The testing was completed by the McAfee quality assurance team. A clean test environment was created which was deployed on a system of commonly used hardware and software specifications, including:

Working Set in MB

VSE 8.7 P1
OptiPlex 960, X86-based PC Dual Core CPU E5300 @

Pentium

2.60 GHz
Figure 3. This test resulted in a 45 percent improvement in memory usage when conducting a full ODS scan using persistent cache. (Source: McAfee, Inc., November 2010)
Microsoft Microsoft Latest Latest
Windows 7 Enterprise x86 (Version 6.1.7600 Build 7600) Office 2007 Firefox browser Microsoft Internet Explorer

On-Access Scan Tests

OAS Times in Minutes
18.00 16.00 14.00 12.00 10.00 8.00 6.00 4.00 2.00 0.00
Registry scanning Applications that access the registry for their operations will see improved response times with version 8.8. For example, opening Microsoft Word generates about 3,900 registry access attempts, and McAfee VirusScan Enterprise monitors each one. The improvement in registry scanning helps reduce the impact on most Microsoft Windows applications and helps them respond better. In our test environment running a benchmark test, we have seen a 11 percent gain using McAfee VirusScan Enterprise 8.8 compared to version 8.7.

Registry Test

VSE 8.8 VSE 8.7 P1

200.00 250.00

214.22 190.78
Figure 2. On-access scanning has improved dramatically in the new version of McAfee VirusScan Enterprise. (Source: McAfee, Inc., November 2010)

150.00

ODS memory reduction The consumption of memory by anti-virus solutions is a big concern for users. The less memory the system uses when scanning for malware, the better the end-user experience will be. McAfee VirusScan Enterprise 8.8 consumes approximately 60 MB less memory when conducting ODS scans. This helps endpoints that are not optimized for high performance run faster when conducting malware scanning, improving the overall user experience.

100.00

Figure 4. In testing, the registry scanning has seen improvements of approximately 11 percent with version 8.8. (Source: McAfee, Inc., November 2010)
20-Factor Test Profile Startup/shutdown tests PC cold startup

Shutdown

Performance Impact of Real-World Operations
(Test of 20 separate consecutive operations)
Baseline time taken to perform all tasks (seconds)

1052 1052

Download Download Download Download Download
Network tests of 20 *.doc files of 20 *.exe files of 20 *.pdf files of 20 *.rar files of 20 *.zip files
Slow-down caused by the security product (seconds)
Other tests a set of files locally MD5 sums for a set of files 2007 startup while loading a file (after booting) 2007 startup while loading a file (repeatedly) 2007 startup (after booting) 2007 startup (repeatedly) Figure 5. Results from AV-test.org show that high-performance McAfee VirusScan Enterprise dramatically improves user productivity. Baseline (Windows 7) McAfee Vendor A VirusScan Enterprise 8.8 & McAfee Host Intrusion Prevention 8.0 Vendor B Vendor C Vendor D
Compute Word Word Word Word Copy
Office 2007 installer from network to local PC Office 2007 a folder containing 200 files (repeatedly) a set of files with WinRAR a set of files with WinRAR

Install Open

Compress

Decompress Start Start

Internet Explorer 8 (after booting) Internet Explorer 8 (repeatedly)
Performance impact To compare McAfee VirusScan Enterprise 8.8 performance to the top anti-virus products on the market, McAfee asked AV-test.org from Germany to independently test performance in a real-world simulation. AV-test.org created a test-bed machine running Microsoft Window 7 and proceeded to run 20 consecutive tests that simulate real end-user activity (see the chart above). The results are shown above and highlight the superior performance of McAfee in reducing the impact of malware protection on end-user productivity. For a detailed report on this test, please contact your McAfee or McAfee partner representative.
Battery life Activities like malware scanning increase CPU usage and impact battery life of mobile devices. Improvements in McAfee VirusScan Enterprise 8.8 result in extending the battery life of laptops. In our test environment, it was calculated that a laptop equipped with McAfee VirusScan Enterprise 8.8 uses 25 percent less battery power compared to version 8.7. Improved system boot time The time it takes to boot up a system is important to every end user who wants to be productive. McAfee VirusScan Enterprise 8.8 has improved boot time when compared to the previous version. During testing, the time it takes to boot a system decreased by approximately 8 percent when using the newer version. Script scan improvements Most websites have scripts that execute when a user does something, for example, filling up a shopping cart on an e-commerce site. Nefarious cybercriminals develop malicious scripts that execute malware that can mimic all kinds of typical user activities and compromise systems. McAfee VirusScan Enterprise scans these scripts to ensure that they are malware free and dont compromise a users system. In version 8.8, the script scanning time has improved by 30 percent. This means scripts load faster, which provides a better browsing experience for the end user.

Battery Life

25% Less Battery Needed

VSE 8.7

Figure 6. Power usage comparison. (Source: McAfee, Inc., November 2010)
.DAT update improvements All anti-virus programs use a signature, or.DAT file, to provide protection against malware. These are constantly being updated with new signatures to protect systems from evolving malware. In McAfee VirusScan Enterprise 8.8 the.DAT update process is now faster. Based on testing, the.DAT update of McAfee VirusScan Enterprise 8.8 is 12 percent faster than version 8.7. This allows the system to be more responsive during the.DAT update process and does not affect the performance of the application running on the system. GCC compilation improvements Developers who use the GNU C Compiler to compile code using McAfee VirusScan Enterprise will see an improvement with version 8.8. For example, if a developer is spending two hours per day compiling code using version 8.7, then he/she will save about 17 minutes, a 15 percent improvement. This saves developers about 5.6 hours per month. Conclusion Overall, the test results revealed that McAfee VirusScan Enterprise 8.8 has significant performance improvements in a number of areas, including time to conduct on-access and ondemand scanning, memory consumptions, boot time, registry scanning, battery life consumption, and other performance metrics. This version of McAfee VirusScan Enterprise will not only provide advance malware techniques to protect from all types of malware, it will also now stop threats faster and have less impact on the end-user experience. To learn more visit www.mcafee.com, or call us at 888.847.8766, 24 hours a day, seven days a week.
About McAfee, Inc. McAfee, Inc., headquartered in Santa Clara, California, is the worlds largest dedicated security technology company. McAfee is relentlessly committed to tackling the worlds toughest security challenges. The company delivers proactive and proven solutions and services that help secure systems and networks around the world, allowing users to safely connect to the Internet, browse, and shop the web more securely. Backed by an award-winning research team, McAfee creates innovative products that empower home users, businesses, the public sector, and service providers by enabling them to prove compliance with regulations, protect data, prevent disruptions, identify vulnerabilities, and continuously monitor and improve their security.

McAfee, Inc. 2821 Mission College Boulevard Santa Clara, CA www.mcafee.com
McAfee, the McAfee logo, and McAfee VirusScan Enterprise are registered trademarks or trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other marks and brands may be claimed as the property of others. The product plans, specifications and descriptions herein are provided for information only and subject to change without notice, and are provided without warranty of any kind, express or implied. Copyright 2011 McAfee, Inc. 20002alrt_vse_0111_fnl_ASD