joukiejouk
asked on
Where can I get a trial download of McAfee Threat Intelligence Exchange (TIE)?
I want to test McAfee TIE/DXL in my environment, but cannot find the trial download for it anywhere. I even looked at McAfee site, and it is no where to be found. I did a search for it in ePO Software Manager, and cannot find it there either. Where can I get the following TIE/DXL packages or extension to try out the product? The packages I need are as follows:
I believe you saw this from McAfee sharing on their McAfee TIE/DXL
Apparently, they do not release it openly as also in the download list of their available McAfee suite, it is best to contact sales as shared http://www.mcafee.com/apps/downloads/free-evaluations/default.aspx?region=us
Just for info, the McAfee TIE/DXL may be of different protocol exchanges compared to Mitre STIX/TAXII use for intelligence sharing (which I find the below can be handy for standard sharing).
http://holisticinfosec.blogspot.sg/2014/08/toolsmith-threats-indicators-security.html
Of course, this is very much driven by Mcafee and eventually become interoperable if endpoints remediation can act on the shared intelligence feeds. But McAfee ATD is worth looking into
Under Software downloads click on “McAfee Threat Intelligence Exchange”https://community.mcafee.com/docs/DOC-6454
Note: These extensions and packages are also available in the ePO Software Manager
Download TIE_Server_1.0.0.xxx.x86_64-MAIN.ova
Apparently, they do not release it openly as also in the download list of their available McAfee suite, it is best to contact sales as shared http://www.mcafee.com/apps/downloads/free-evaluations/default.aspx?region=us
Just for info, the McAfee TIE/DXL may be of different protocol exchanges compared to Mitre STIX/TAXII use for intelligence sharing (which I find the below can be handy for standard sharing).
http://holisticinfosec.blogspot.sg/2014/08/toolsmith-threats-indicators-security.html
Of course, this is very much driven by Mcafee and eventually become interoperable if endpoints remediation can act on the shared intelligence feeds. But McAfee ATD is worth looking into
ASKER
In layman's term, what does TIE do? Please specify a simple two to three line sentence. I am new to this product and just want to simply explain it to others who are non-technical.
TIE is just an "language" that device can speak and understand what each want to convey across in specific topic of interest. It is for sharing and exchanges of message - in this case, intel info from each devices telling one another I am vulnerable or under attack or seen something strange or etc (useful tips) that it wants to report and share with everyone in the environment.
The police post (in this case TIE server) is like a central "lighthouse" collecting those "stories and news" to determine if it need to act on it further E.g. telling the patrol team to stop the incident (rollout hotfixes via EPO) if ongoing or just to heighten vigiliance (vulnerability scan trigger by Vul mgr) to facilitate and mediate the whole situation...
The police post (in this case TIE server) is like a central "lighthouse" collecting those "stories and news" to determine if it need to act on it further E.g. telling the patrol team to stop the incident (rollout hotfixes via EPO) if ongoing or just to heighten vigiliance (vulnerability scan trigger by Vul mgr) to facilitate and mediate the whole situation...
ASKER
btan,
Great and simple explanation! Thanks!
Great and simple explanation! Thanks!
ASKER
David,
Is there a way I can download these products without the need to speak to Sales? I just want to try out the product so I can do a proof of concept on it.
Is there a way I can download these products without the need to speak to Sales? I just want to try out the product so I can do a proof of concept on it.
tech support online chat offered to set me up
from mcaffee chat
Some products require the assistance of our technical account manager to arrange for a trial or demos.
i can help to arrange that for you. Are you an existing McAfee customer?
ASKER
How can i tell if my current ePO server is tied to a SQL server database, or using a SQL Server Express (internal)? We are currently on ePO 4.6.6? We want to upgrade to 5.1.1 as that is the requirement for TIE.
For SQL info, it is separately installed like any SQL server. You can check your local program files to it. e.g. SQL Server 2005 Express default location defined by Microsoft is at "C:\Program Files\Microsoft SQL Server". More info on "About the SQL Server installation documented in this guide"
https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/22000/PD22974/en_US/epo_460_install_guide_en-us.pdf
this share more info on how best to migrate to ePolicy Orchestrator 5.1, which need min SQL 2K8 above.
https://community.mcafee.com/message/340275
Supported Platforms, Environments, and Operating Systems for ePolicy Orchestrator
https://kc.mcafee.com/corporate/index?page=content&id=KB51569
in fact this can help in finding out more on the DB - "Recommended procedure for migrating or moving an ePO database to a new SQL server" https://kc.mcafee.com/corporate/index?page=content&id=KB68427
https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/22000/PD22974/en_US/epo_460_install_guide_en-us.pdf
this share more info on how best to migrate to ePolicy Orchestrator 5.1, which need min SQL 2K8 above.
https://community.mcafee.com/message/340275
Supported Platforms, Environments, and Operating Systems for ePolicy Orchestrator
https://kc.mcafee.com/corporate/index?page=content&id=KB51569
in fact this can help in finding out more on the DB - "Recommended procedure for migrating or moving an ePO database to a new SQL server" https://kc.mcafee.com/corporate/index?page=content&id=KB68427
ASKER
btan,
I do not see SQL Server Express in "Add/Remove Programs" on my ePO server. I also looked at the path C:\Program Files (x86), and C:\Program Files, and Microsoft SQL Server directory is no where to be found. Does this mean that SQL Server 2005 Express is not installed? How can I tell from the server or ePO console what SQL server is tied into ePO?
I do not see SQL Server Express in "Add/Remove Programs" on my ePO server. I also looked at the path C:\Program Files (x86), and C:\Program Files, and Microsoft SQL Server directory is no where to be found. Does this mean that SQL Server 2005 Express is not installed? How can I tell from the server or ePO console what SQL server is tied into ePO?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
from mcaffee chat
Some products require the assistance of our technical account manager to arrange for a trial or demos.
i can help to arrange that for you. Are you an existing McAfee customer?