cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
twenden
Level 13
Report Inappropriate Content
Message 1 of 2

What the main differences between ENS for Linux 10.2.3 and 10.5.0

Jump to solution

Just noticed that McAfee has just released ENS Threat Prevention for Linux version 10.5.0. We have just upgraded our systems to ENS 10.2.3. We were on versin 10.2.2 but upgraded to 10.2.3 due to its support for the new RedHat 7.5.

From reading the release notes, I can't really see what the main differences between 10.2.3 & 10.5.0. does anyone know what the differences are and whether it is worth the upgrade?

 

1 Solution

Accepted Solutions
bakerrl
Level 11
Report Inappropriate Content
Message 2 of 2

Re: What the main differences between ENS for Linux 10.2.3 and 10.5.0

Jump to solution

ENS for Linux v10.5.0 now has Access Protetion.
A replacment for HIPS for Linux?  They really don't say.
As usual McAfee does not elaborate much further.

Oh,  You also need ENS Extension Threat_Prevention_10_5_4_4070_4 to get those new settings.
Which again, they don't clarify.

New features
The current release of the product includes these new features.
Feature Description
Access Protection for your Linux
systems
Using Access Protection, you can define access control policies and
settings for processes, files, and directories on standalone and managed
systems.

Migrating policies from Host Intrusion Prevention
You can migrate custom policies and Linux rules from Host Intrusion Prevention version 8 with patch 10 and
later so that you can continue to apply the same rules to your managed systems from Endpoint Security for
Linux Threat Prevention.
Custom policies from Host Intrusion Prevention are migrated to Access Protection in Endpoint Security for
Linux. You can use the automatic or the manual mode for migrating the custom policies. For migrating custom
policies from Host Intrusion Prevention to Endpoint Security for Linux Threat Prevention, you must upgrade
Endpoint Security for Linux Threat Prevention to 10.5, then migrate the policies.

Migration of custom policies from
McAfee® Host Intrusion Prevention
Supports migrating custom policies from Host Intrusion Prevention
using Endpoint Migration Assistant.

1 Reply
bakerrl
Level 11
Report Inappropriate Content
Message 2 of 2

Re: What the main differences between ENS for Linux 10.2.3 and 10.5.0

Jump to solution

ENS for Linux v10.5.0 now has Access Protetion.
A replacment for HIPS for Linux?  They really don't say.
As usual McAfee does not elaborate much further.

Oh,  You also need ENS Extension Threat_Prevention_10_5_4_4070_4 to get those new settings.
Which again, they don't clarify.

New features
The current release of the product includes these new features.
Feature Description
Access Protection for your Linux
systems
Using Access Protection, you can define access control policies and
settings for processes, files, and directories on standalone and managed
systems.

Migrating policies from Host Intrusion Prevention
You can migrate custom policies and Linux rules from Host Intrusion Prevention version 8 with patch 10 and
later so that you can continue to apply the same rules to your managed systems from Endpoint Security for
Linux Threat Prevention.
Custom policies from Host Intrusion Prevention are migrated to Access Protection in Endpoint Security for
Linux. You can use the automatic or the manual mode for migrating the custom policies. For migrating custom
policies from Host Intrusion Prevention to Endpoint Security for Linux Threat Prevention, you must upgrade
Endpoint Security for Linux Threat Prevention to 10.5, then migrate the policies.

Migration of custom policies from
McAfee® Host Intrusion Prevention
Supports migrating custom policies from Host Intrusion Prevention
using Endpoint Migration Assistant.