Where can I get a trial download of McAfee Threat Intelligence Exchange (TIE)?

I  want to test McAfee TIE/DXL in my environment, but cannot find the trial download for it anywhere. I even looked at McAfee site, and it is no where to be found. I did a search for it in ePO Software Manager, and cannot find it there either. Where can I get the following TIE/DXL packages or extension to try out the product? The packages I need are as follows:

TIE
joukiejoukAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David Johnson, CD, MVPOwnerCommented:
contact sales for a trial if available.
from mcaffee chat
Some products require the assistance of our technical account manager to arrange for a trial or demos.
  i can help to arrange that for you. Are you an existing McAfee customer?
0
btanExec ConsultantCommented:
I believe you saw this from McAfee sharing on their McAfee TIE/DXL
Under Software downloads click on “McAfee Threat Intelligence Exchange”
Note:  These extensions and packages are also available in the ePO Software Manager
Download TIE_Server_1.0.0.xxx.x86_64-MAIN.ova
https://community.mcafee.com/docs/DOC-6454

Apparently, they do not release it openly as also in the download list of their available McAfee suite, it is best to contact sales as shared http://www.mcafee.com/apps/downloads/free-evaluations/default.aspx?region=us

Just for info, the McAfee TIE/DXL may be of different protocol exchanges compared to Mitre STIX/TAXII use for intelligence sharing (which I find the below can be handy for standard sharing).
http://holisticinfosec.blogspot.sg/2014/08/toolsmith-threats-indicators-security.html

Of course, this is very much driven by Mcafee and eventually become interoperable if endpoints remediation can act on the shared intelligence feeds. But McAfee ATD is worth looking into
0
joukiejoukAuthor Commented:
In layman's term, what does TIE do? Please specify a simple two to three line sentence. I am new to this product and just want to simply explain it to others who are non-technical.
0
Make Network Traffic Fast and Furious with SD-WAN

Software-defined WAN (SD-WAN) is a technology that determines the most effective way to route traffic to and from datacenter sites. Register for the webinar today to learn how your business can benefit from SD-WAN!

btanExec ConsultantCommented:
TIE is just an "language" that device can speak and understand what each want to convey across in specific topic  of interest. It is for sharing and exchanges of message - in this case, intel info from each devices telling one another I am vulnerable or under attack or seen something strange or etc (useful tips) that it wants to report and share with everyone in the environment.

The police post (in this case TIE server) is like a central "lighthouse" collecting those "stories and news" to determine if it need to act on it further E.g. telling the patrol team to stop the incident (rollout hotfixes via EPO) if ongoing or just to heighten vigiliance (vulnerability scan trigger by Vul mgr) to facilitate and mediate the whole situation...
0
joukiejoukAuthor Commented:
btan,

Great and simple explanation! Thanks!
0
joukiejoukAuthor Commented:
David,

Is there a way I can download these products without the need to speak to Sales? I just want to try out the product so I can do a proof of concept on it.
0
David Johnson, CD, MVPOwnerCommented:
tech support online chat offered to set me up
from mcaffee chat
Some products require the assistance of our technical account manager to arrange for a trial or demos.

 i can help to arrange that for you. Are you an existing McAfee customer?
0
joukiejoukAuthor Commented:
How can i tell if my current ePO server is tied to a SQL server database, or using a SQL Server Express (internal)? We are currently on ePO 4.6.6? We want to upgrade to 5.1.1 as that is the requirement for TIE.
0
btanExec ConsultantCommented:
For SQL info, it is separately installed like any SQL server. You can check your local program files to it. e.g. SQL Server 2005 Express default location defined by Microsoft is at "C:\Program Files\Microsoft SQL Server". More info on "About the SQL Server installation documented in this guide"
https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/22000/PD22974/en_US/epo_460_install_guide_en-us.pdf

this share more info on how best to migrate to ePolicy Orchestrator 5.1, which need min SQL 2K8 above.
https://community.mcafee.com/message/340275

Supported Platforms, Environments, and Operating Systems for ePolicy Orchestrator
https://kc.mcafee.com/corporate/index?page=content&id=KB51569

in fact this can help in finding out more on the DB - "Recommended procedure for migrating or moving an ePO database to a new SQL server" https://kc.mcafee.com/corporate/index?page=content&id=KB68427
0
joukiejoukAuthor Commented:
btan,

I do not see SQL Server Express in "Add/Remove Programs" on my ePO server. I also looked at the path C:\Program Files (x86), and C:\Program Files, and Microsoft SQL Server directory is no where to be found. Does this mean that SQL Server 2005 Express is not installed? How can I tell from the server or ePO console what SQL server is tied into ePO?
0
btanExec ConsultantCommented:
another means is via the web admin page, the "servername" can be your localhost or simply your EPOservername https://kc.mcafee.com/corporate/index?page=content&id=KB51465

Minimally if the All program did not have the SQL Management Studio, you may want to consider installing it and try the connection. It does not come as default though https://kc.mcafee.com/corporate/index?page=content&id=KB56446

Also there is another useful tool called SQL Server Configuration Manager tool that is installed with both SQL Server 2005 and 2008, catch this to find out the SQL lversion and instance https://learningsqlserver.wordpress.com/2011/01/21/what-version-of-sql-server-do-i-have/

From Microsoft itself, to identify SQL...
How to determine which version and edition of SQL Server Database Engine is running

To determine the version of SQL Server, you can use any of the following methods:

Method 1: Connect to the server by using Object Explorer in SQL Server Management Studio. After Object Explorer is connected, it will show the version information in parentheses, together with the user name that is used to connect to the specific instance of SQL Server.

Method 2: Look at the first few lines of the Errorlog file for that instance. By default, the error log is located at Program Files\Microsoft SQL Server\MSSQL.n\MSSQL\LOG\ERRORLOG and ERRORLOG.n files.

Method 3: Connect to the instance of SQL Server, and then run the following query:
Select @@version

Method 4: Connect to the instance of SQL Server, and then run the following query:

SELECT SERVERPROPERTY('productversion'), SERVERPROPERTY ('productlevel'), SERVERPROPERTY ('edition')
http://support.microsoft.com/kb/321185
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.