Where can I get a trial download of McAfee Threat Intelligence Exchange (TIE)?

I  want to test McAfee TIE/DXL in my environment, but cannot find the trial download for it anywhere. I even looked at McAfee site, and it is no where to be found. I did a search for it in ePO Software Manager, and cannot find it there either. Where can I get the following TIE/DXL packages or extension to try out the product? The packages I need are as follows:

TIE
joukiejoukAsked:
Who is Participating?
 
btanExec ConsultantCommented:
another means is via the web admin page, the "servername" can be your localhost or simply your EPOservername https://kc.mcafee.com/corporate/index?page=content&id=KB51465

Minimally if the All program did not have the SQL Management Studio, you may want to consider installing it and try the connection. It does not come as default though https://kc.mcafee.com/corporate/index?page=content&id=KB56446

Also there is another useful tool called SQL Server Configuration Manager tool that is installed with both SQL Server 2005 and 2008, catch this to find out the SQL lversion and instance https://learningsqlserver.wordpress.com/2011/01/21/what-version-of-sql-server-do-i-have/

From Microsoft itself, to identify SQL...
How to determine which version and edition of SQL Server Database Engine is running

To determine the version of SQL Server, you can use any of the following methods:

Method 1: Connect to the server by using Object Explorer in SQL Server Management Studio. After Object Explorer is connected, it will show the version information in parentheses, together with the user name that is used to connect to the specific instance of SQL Server.

Method 2: Look at the first few lines of the Errorlog file for that instance. By default, the error log is located at Program Files\Microsoft SQL Server\MSSQL.n\MSSQL\LOG\ERRORLOG and ERRORLOG.n files.

Method 3: Connect to the instance of SQL Server, and then run the following query:
Select @@version

Method 4: Connect to the instance of SQL Server, and then run the following query:

SELECT SERVERPROPERTY('productversion'), SERVERPROPERTY ('productlevel'), SERVERPROPERTY ('edition')
http://support.microsoft.com/kb/321185
0
 
David Johnson, CD, MVPOwnerCommented:
contact sales for a trial if available.
from mcaffee chat
Some products require the assistance of our technical account manager to arrange for a trial or demos.
  i can help to arrange that for you. Are you an existing McAfee customer?
0
 
btanExec ConsultantCommented:
I believe you saw this from McAfee sharing on their McAfee TIE/DXL
Under Software downloads click on “McAfee Threat Intelligence Exchange”
Note:  These extensions and packages are also available in the ePO Software Manager
Download TIE_Server_1.0.0.xxx.x86_64-MAIN.ova
https://community.mcafee.com/docs/DOC-6454

Apparently, they do not release it openly as also in the download list of their available McAfee suite, it is best to contact sales as shared http://www.mcafee.com/apps/downloads/free-evaluations/default.aspx?region=us

Just for info, the McAfee TIE/DXL may be of different protocol exchanges compared to Mitre STIX/TAXII use for intelligence sharing (which I find the below can be handy for standard sharing).
http://holisticinfosec.blogspot.sg/2014/08/toolsmith-threats-indicators-security.html

Of course, this is very much driven by Mcafee and eventually become interoperable if endpoints remediation can act on the shared intelligence feeds. But McAfee ATD is worth looking into
0
Get Cisco Certified in IT Security

There’s a high demand for IT security experts and network administrators who can safeguard the data that individuals, corporations, and governments rely on every day. Pursue your B.S. in Network Operations and Security and gain the credentials you need for this high-growth field.

 
joukiejoukAuthor Commented:
In layman's term, what does TIE do? Please specify a simple two to three line sentence. I am new to this product and just want to simply explain it to others who are non-technical.
0
 
btanExec ConsultantCommented:
TIE is just an "language" that device can speak and understand what each want to convey across in specific topic  of interest. It is for sharing and exchanges of message - in this case, intel info from each devices telling one another I am vulnerable or under attack or seen something strange or etc (useful tips) that it wants to report and share with everyone in the environment.

The police post (in this case TIE server) is like a central "lighthouse" collecting those "stories and news" to determine if it need to act on it further E.g. telling the patrol team to stop the incident (rollout hotfixes via EPO) if ongoing or just to heighten vigiliance (vulnerability scan trigger by Vul mgr) to facilitate and mediate the whole situation...
0
 
joukiejoukAuthor Commented:
btan,

Great and simple explanation! Thanks!
0
 
joukiejoukAuthor Commented:
David,

Is there a way I can download these products without the need to speak to Sales? I just want to try out the product so I can do a proof of concept on it.
0
 
David Johnson, CD, MVPOwnerCommented:
tech support online chat offered to set me up
from mcaffee chat
Some products require the assistance of our technical account manager to arrange for a trial or demos.

 i can help to arrange that for you. Are you an existing McAfee customer?
0
 
joukiejoukAuthor Commented:
How can i tell if my current ePO server is tied to a SQL server database, or using a SQL Server Express (internal)? We are currently on ePO 4.6.6? We want to upgrade to 5.1.1 as that is the requirement for TIE.
0
 
btanExec ConsultantCommented:
For SQL info, it is separately installed like any SQL server. You can check your local program files to it. e.g. SQL Server 2005 Express default location defined by Microsoft is at "C:\Program Files\Microsoft SQL Server". More info on "About the SQL Server installation documented in this guide"
https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/22000/PD22974/en_US/epo_460_install_guide_en-us.pdf

this share more info on how best to migrate to ePolicy Orchestrator 5.1, which need min SQL 2K8 above.
https://community.mcafee.com/message/340275

Supported Platforms, Environments, and Operating Systems for ePolicy Orchestrator
https://kc.mcafee.com/corporate/index?page=content&id=KB51569

in fact this can help in finding out more on the DB - "Recommended procedure for migrating or moving an ePO database to a new SQL server" https://kc.mcafee.com/corporate/index?page=content&id=KB68427
0
 
joukiejoukAuthor Commented:
btan,

I do not see SQL Server Express in "Add/Remove Programs" on my ePO server. I also looked at the path C:\Program Files (x86), and C:\Program Files, and Microsoft SQL Server directory is no where to be found. Does this mean that SQL Server 2005 Express is not installed? How can I tell from the server or ePO console what SQL server is tied into ePO?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.