McAfee endpoint security is a multi-layer protection system that relies on threat detection both at local level and at a central controller. The local unit is an antivirus package that also identifies intrusion and insider threats. The central module acts as a SIEM and will perform further threat detection, sending response instructions to endpoints and other on-site security services to block intrusion and malware.