Updates to McAfee intrusion prevention system
On Dec. 17 from 6 to 8 p.m., Vanderbilt IT Security Operations analysts will make configuration changes in the McAfee Network Security Manager to integrate the Network Threat Behavior Analysis (NTBA) sensor with the intrusion prevention system (IPS) sensors, which filter incoming and outgoing traffic. Though this could potentially affect the community at large, no impact is expected since the NTBA is a passive device (meaning that other systems send log files to the NTBA for analysis).
The NTBA helps maintain a comprehensive and efficient network security infrastructure by analyzing traffic from switches and routers to detect worms, botnets, zero-day threats, spam and reconnaissance attacks.