SOLUTION OVERVIEW

Tenable.ot for McAfee

Business Challenge
Industrial control systems (ICS) can have major impacts on society,organizations and individuals’ lives. While once isolated from other partsof your organization or network and considered static systems, this is nolonger the case. Today, ICS devices are on your OT network and connected toenterprise and IT systems. That also means they are vulnerable to malware,cyber-attacks, insider threats, misconfigurations and even failed maintenance.
Your modern attack surface now encompasses both IT and OT. Because
these two different worlds are connected, an attack that starts in your IT
environment can quickly move to your OT environment and vice versa. Lateral
movement is a standard attack vector for hackers because it’s relatively easy
to find a weak link in your system, leverage it as a point of entry, and thenquickly own your entire network.

TechnologyComponents• Tenable.ot• McAfee ESM

The Challenge• Inability to see both IT and OT in a single“pane of glass”• How to effectively detect and mitigate threats

Today’s IT and OT security personnel, risk departments and even your C-suite
face challenges of being able to gain insight in a single “pane of glass” toensure complete visibility, security and control of potential attacks in bothyour IT and OT environments.

to the safety, reliability and continuity ofindustrial processes• Lack of access to the last known “good state” inan OT environment• Full and instant inventory management on

The Joint Solution
Today’s attacks are significantly more sophisticated and include Zero-day
and targeted attacks, social engineering and spear phishing—all designed toestablish a beachhead and modify or destroy critical industrial operations.
The key to a successful breach is to keep the nefarious activity undetected for
as long as possible.

each device• Absent or deficient audit and paper trail• Full forensic capabilities that provide context
when an incident occurs

Key Benefits• Improved security automation, sensing andSome of the most effective tools for fighting these attacks involve security
intelligence and event management (SIEM) solutions. SIEM solutions monitor
both real-time events and a mountain of long-term data to find anomalouspatterns of usage, qualify possible security and compliance threats to reduce
false positives, and alert organizations when needed.

How It Works
McAfee Enterprise Security Manager (ESM), the foundational SIEM solution,delivers the performance, actionable intelligence, and real-time situational

visibility• Increased control over distributed operations• Better compliance with regulatory requirements
and tracking• Higher responsiveness when incidents occur
and improved organizational performance• Better decision-making based on more detailedinformation• Proactive maintenance and reduced response
times to unforeseen disruptions• Improved flow of information to stakeholders

SOLUTION OVERVIEWAB OUT T E N AB LETenable®, Inc. is the Cyber
Exposure company. Over 30,000
organizations around the globe
rely on Tenable to understand andreduce cyber risk. As the creator ofNessus®, Tenable extended its
expertise in vulnerabilities todeliver the world’s first platform tosee and secure any digital asset on
any computing platform. Tenable
customers include more than 50
percent of the Fortune 500, morethan 30 percent of the Global 2000
and large government agencies.
Learn more at www.tenable.com.

A B O U T MC A F E E
McAfee Enterprise Security
Manager—the foundation of thesecurity information and event
management (SIEM) solution
family from McAfee—delivers
the performance, actionable
intelligence, and real-timesituational awareness at thespeed and scale required for
security organizations to identify,
understand, and respond tostealthy threats, while theembedded compliance framework
simplifies compliance.
Learn more at mcafee.com.

Workstation

Historian

SIEM

SCADA

Mail Server

Sensor

Switch(McAfee)

SwitchSensor

Switch.ot

HMI

PLC.otPanel

PLC

Sensor.ot

RTU

PLCawareness at the speed and scale you need to identify, understand, andrespond to stealthy threats, while the embedded framework simplifies yourability to audit and proactively report on compliance.
Tenable.ot provides situational awareness and real-time security for industrial
control networks to ensure operational continuity and reliability. It delivers
comprehensive visibility and oversight into all of your OT activities, whether
on network or device-based. These include changes to controller logic,
configuration and state across all vendor devices, network communication
patterns, rouge devices, malware propagation and more.
Monitoring and detection utilize both a hybrid detection engine andpatented active-querying technology that can query devices safely in theirnative communication protocols without ever affecting them. This allows forvalidation of PLC and PCs firmware/OS code/software and configuration.
Tenable.ot provides a critical feed into McAfee’s ESM and delivers visibility,security and control for your operational environment. Advanced OT security,
combined with the native capabilities of the ESM, delivers the intelligence youneed across your OT and IT environments.
The joint solution offers visibility, security and control for industrial networks,
enabling security professionals to effectively detect and mitigate threats tothe safety, reliability and continuity of industrial processes. As part of the joint
solution, monitoring occurs across your IT and OT environments to ensure
early and comprehensive threat detection and mitigation that other point
products can easily miss.

More Information
For support please contact: support@tenable.com
COPYRIGHT 2020 TENABLE, INC. ALL RIGHTS RESERVED. TENABLE, TENABLE.IO, TENABLE NETWORKSECURITY, NESSUS, SECURITYCENTER, SECURITYCENTER CONTINUOUS VIEW AND LOG CORRELATIONENGINE ARE REGISTERED TRADEMARKS OF TENABLE, INC. TENABLE.SC, TENABLE.OT, LUMIN, INDEGY,ASSURE, AND THE CYBER EXPOSURE COMPANY ARE TRADEMARKS OF TENABLE, INC. ALL OTHERPRODUCTS OR SERVICES ARE TRADEMARKS OF THEIR RESPECTIVE OWNERS.

Solution Overview / McAfee / 2