cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

NTBA, who (isn't) using it?

Jump to solution

The NTBA seems to be a interesting and complimentary component of the IPS suite and if I'm not mistaken, for free (supporting up to 2 NS-IPS devices). Having "free" and "complimentary" in one sentence, I wonder who is using it and of the people who aren't, if they have been offered the NTBA for free Also, from your experience, how you see it next to an NS-IPS with GTI (Artemis) service: complimentary or perhaps having more or less added value?

1 Solution

Accepted Solutions
Highlighted

Re: NTBA, who (isn't) using it?

Jump to solution

The "free" version is a VM. The model is actually T-VM. There are other VM models that require additional purchase. There is support it for because it is a feature included with license purchased with the NSP. The level of support depends on the support package purchased. The main advantage for some adopters is that it allows them to run the GAM against files on sensors that are not currently able to run GAM themselves (such as M-2950). Although it can only collect from two sensors most organizations have a spot on their network where they can still collect the NetFlow needed.

View solution in original post

7 Replies
Highlighted

Re: NTBA, who (isn't) using it?

Jump to solution

Moved to Network Security Platform for better response.

---

Peter

Volunteer Moderator

Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 3 of 8

Re: NTBA, who (isn't) using it?

Jump to solution

Hi hrattink,

I was not aware that it was free, where did you get that information?

Regards

Peter

Highlighted

Re: NTBA, who (isn't) using it?

Jump to solution

I heard this from a McAfee SA. The free version can handle up to 2 IPS sources, if I'm not mistaken

Highlighted
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 5 of 8

Re: NTBA, who (isn't) using it?

Jump to solution

Hi hrattink,

Is the free version the virtual NTBA software?

Did they say there was free support for it too, or do you need to add it to your support contract?

Regards

Peter

Highlighted

Re: NTBA, who (isn't) using it?

Jump to solution

The "free" version is a VM. The model is actually T-VM. There are other VM models that require additional purchase. There is support it for because it is a feature included with license purchased with the NSP. The level of support depends on the support package purchased. The main advantage for some adopters is that it allows them to run the GAM against files on sensors that are not currently able to run GAM themselves (such as M-2950). Although it can only collect from two sensors most organizations have a spot on their network where they can still collect the NetFlow needed.

View solution in original post

Highlighted

Re: NTBA, who (isn't) using it?

Jump to solution

Do you know if the NTBA is doing the sandboxing itselves or perhaps is using a cloudservice for analysing files that have unmatched hashes?

Highlighted

Re: NTBA, who (isn't) using it?

Jump to solution

NTBA does not do sandbox analysis of suspect files. You'll need ATD for that. NTBA's main purpose is network traffic anomaly detection using NetFlow. Since not every sensor model can run GAM I think they made a smart move incorporating it in NTBA.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community