McAfee is pleased to announce the beta release of McAfee Anti-Malware Engine version 5500. The 5500 Engine will succeed the current 5400 Anti-Malware Engine.
The McAfee Anti-Malware Engine is a component at the heart of award-winning McAfee endpoint and gateway products that deliver industry-leading malware protection. Using patented technology, it analyzes files and malicious code in real-time to detect and block Trojans, viruses, worms, adware, spyware, riskware, and other threats.
We encourage you to actively participate in this beta program and provide your valuable feedback.
New Features & Enhancements
• Performance enhancements to Multipurpose Internet Mail Extensions (MIME) scanning
• File decomposition support for RedHat Package Manager (.rpm) file format
• New platforms: HP-UX Itanium 11.2 and 11.3
• End Of Life’d platforms: Mac OSX 10.2.8, 10.3.9, Novell Netware & Microsoft Windows NT4
Disk space and memory:
• At least 512 MB of free hard disk space
• At least an additional 512 MB of free hard disk space reserved for temporary files
• At least 512 MB of RAM for scanning operations (1024 MB recommended minimum)
• At least 1024 MB of RAM for updating operations
on 30/1/12 3:47:23 PM IST
The new features and enhancements list for the 5500 engine is rather light. Is there additional information regarding improvements to this scan engine? I am looking for reasons why I would want to take a stong look at the new engine.
This engine is a roll up of fixes and the feature set is indeed light. The 5500 engine when it releases should also be Windows8 Desktop App Certified ready.
The anti-malware engine hasn't been updated for a while and we're going to change that. As we establish a cadence of doing multiple engine releases in a year - this is an opportunity to get the rollout processes for your organization in place to be able to consume newer engines quicker.
on 7/2/12 7:11:12 PM IST
... As we establish a cadence of doing multiple engine releases in a year...
This sounds fair, as long as the update process is as transparent and reliable as a DAT update, or else we won't get to do more than one a year at best.
Also, an engine release must be supported for at least 1-2 years from release regardless of the number of later versions released or else we create a huge task to track and lifecycle the engine outside of our build release process.
We're working aggressively to reduce the dat size this year. In order for us to progressively reduce the dat size - updates are required to the engine. The sooner newer engines get consumed in the field - the better we are in a position to remove legacy content from the dats and reduce its size.
McAfee Labs is committed to delivering high quality releases and the engine is a core release for us. If we were to support multiple engines in the field over a 1-2 period - we will need to maintain overlapping legacy vs. new content and it does not help our reducing overall dat size plans.
I understand and appreciate the overall benefit of smaller DATs but in a large enterprise I think you'll find we'd rather take a 300KB incremental than having to manage say four additional mandatory software pushes a year.
The key here is going to be how intrusive these engine updates are. If they are silent, transparent and cause very little problem then we could probably sell it as just another normal, automated feature push as part of the anti-malware update process. If they are noisy, cause CPU spikes or frequently cause issues then there will be pressure to treat each and every engine update as a managed software distribution task. That would take many months to plan and execute for 100K clients.
Thanks for the feedback Matt.
The 5500 engine is a maintenance release with light features added. The upgrade should be transparent and without noticeable impact to the system.
The 5600 engine which we're planning for release end of the year will have significant enhancements to detection, repair and performance and will need enhanced evaluation cycles before mass deployment. More details on the upcoming 5600 engine will be shared when we RTW 5500.
5500 Anti-Virus Scanning Engine is RTW to Consumer
From March 21st, 2012; the 5500 Engine will be deployed to Consumer Windows products in phases. The 5500 Engine is expected to automatically replace the current 5400 anti-malware Engine.
When will the 5500 Engine be Released to =World (RTW) for Enterprise?
Until recently, RTW (Elective Download) was scheduled for March 2012. However, internal testing within McAfee helped to identify potential corporate customer field issues before we released the 5500 Engine to customers. The 5500 Engine will now be delivered to Enterprise customers in a phased rollout until these issues are resolved. Pending this, it will be removed from the corporate beta download site. An updated release date will be communicated as soon as practical.
The definitive development and launch schedule is not currently available, KB66741 will be updated as soon as that information becomes available.