McAfee SIA helps to accelerate the development of open and interoperable security products, simplify integration within complex customer environments, and provide a truly integrated, connected security ecosystem to maximize the value of existing customer security investments. As an extension of McAfee SIA, the McAfee CASB Connect Program is the industry’s first self-serve framework and accompanying program that enables any cloud service provider or partner to rapidly onboard any SaaS application onto McAfee MVISION Cloud thereby securing data within any cloud service in the catalog. New partners that have joined the McAfee SIA program include: ● A10 Networks
● AttackIQ
● Cythereal
● D3 Security
● Dragos
● Indegy
● Mimecast
● Nasuni
● Nutanix
● OpenText
● Siemplify
The McAfee CASB Connect framework, which allows cloud service providers or partners to build lightweight API connectors to McAfee MVISION Cloud, has now expanded significantly and brought new service providers on to the MVISION Cloud Platform, including:
● Atlassian
● Clarizen
● DbCom
● Introhive
Since most cloud services vary in the availability and maturity of their APIs, the CASB Connect Framework, now provides a unified platform for comprehensive control over all sanctioned and unsanctioned cloud services, from managed and unmanaged devices. This helps cloud services and partners to be fast-tracked onto the MVISION Cloud Security Platform.
Leveraging the power of CASB Connect, MVISION Cloud customers can extend the same levels of data security across all cloud services through a single platform which helps to:
- Enforce Data Loss Prevention (DLP) policies to protect sensitive and regulated data
- Enforce internal and external collaboration policies
- Inspect login, data upload, data download and administrator activity to maintain an audit trail for forensic investigation and detect any anomalous behavior
- Enforce contextual access control policies to enforce data access and download controls based on user, location or device (both managed and unmanaged)
“Not all cloud service providers have the APIs needed to build integration to MVISION Cloud,” said Javed Hasan, Global Head of Enterprise Products Strategy and Alliances, McAfee. “Even in those cases, the CASB Connect framework can now be used to quickly onboard a SaaS application to McAfee’s CASB platform with support for the most critical use cases out-of-the box. A unique advantage of this new capability is it helps customers enforce security policies to prevent sensitive data from being downloaded onto any managed/unmanaged device, both within and outside of the corporate network perimeter.”
McAfee, which has a total of 160 integration partners through McAfee SIA and McAfee CASB Connect Program, also announced new partners and certified integrations.
“MVISION Cloud allowed security to say yes to the business at Pacific Dental Services (PDS) by transparently addressing our critical security and compliance needs in the use of cloud services like Office365, Box, and AWS among others,” said Nemi George, CISO at PDS. “Through McAfee’s CASB Connect program we have seamlessly extended those same policies and controls to cloud services like Okta and SmartSheet thereby improving our cloud maturity and reducing our TCO.”
According to Bryant Lee, Head of Partnerships and Integrations at Atlassian, “Through the CASB Connect program, McAfee and Atlassian have collaborated to provide Atlassian customers with advanced data security and threat protection capabilities that help businesses reduce the risk of data breaches, data loss, and more easily detect malicious activity.”
Partner highlights include:
- A10 Networks - The A10 Thunder® SSLi® is an SSL/TLS visibility solution that eliminates the encryption-induced security blind spots by decrypting enterprise traffic and enabling security devices to detect and stop encrypted attacks. Thunder SSLi integrates with the McAfee Network Security Platform (NSP) by intercepting enterprise traffic, decrypting it, and forwarding it to NSP in clear-text. This enables NSP to inspect encrypted traffic easily, and perform advanced intrusion prevention and malware analysis, without compromising performance.
- Clarizen - With ongoing concerns over data security and privacy, the McAfee and Clarizen partnership offers an added layer of protection for large enterprise organizations. By leveraging self-service API connectors to McAfee MVISION Cloud, Clarizen can give their customers confidence that their data is safe and secure without getting in the way of work collaboration and business processes managed through Clarizen One.
- D3 Security – D3 SOAR provides security orchestration, automation and response with MITRE ATT&CK in its DNA. This allows SOC operators to coordinate incident response workflows across all tools and assets, ensuring rapid and consistent remediations. The integration between D3 SOAR and McAfee ESM helps SOC and IR teams by improving the speed and quality of investigations, enabling proactive analysis, and dramatically reducing MTTR. Events in ESM trigger detailed playbooks in D3, which automatically act on intelligence and from the security infrastructure and data sources, which keeps SOC operators focused on suspicious behavior and threats.
- DbCom—Eqube is a regulatory compliance system designed and hosted by DbCom to maintain sensitive customer data for large multi-national financial systems. Cloud security controls are essential for DbCom as they undergo frequent cyber audits to ensure their customer data is secured—it’s critical these organizations have 100 percent clarity on content and patterns of data moving between their premises and DbCom’s hosted application in AWS. With McAfee’s CASB technology, DbCom can provide real-time visibility of the data in motion, providing the utmost sense of security to DbCom and their customers.
- Indegy – The Indegy Security Suite provides users visibility and security control of their industrial operations, operational technology (OT), and IT networks. Indegy surfaces industrial control system (ICS) events, and OT security event information in McAfee ESM, so that security administrators have view of both the IT and OT environments for enhanced situational awareness.
- Introhive--Introhive's API integrates seamlessly with MVISION Cloud to allow clients to expose and correct negligent, malicious and suspicious user behavior. This integration also helps to prevent sensitive data from syncing into Introhive and customer relationship management systems via Introhive Data Automation.
- Siemplify--Siemplify, a leading independent provider of security orchestration, automation and response (SOAR), has partnered with McAfee to make its flagship Siemplify Security Operations Platform available to McAfee customers via MVISION ePolicy Orchestrator. SOAR technology, which is experiencing booming adoption rates across industries, allows security operations teams to work more efficiently and effectively by seamlessly automating and orchestrating the multitude of tools and processes required to triage, investigate and respond to cyber threats at scale.
