SlideShare a Scribd company logo
1 of 2
Download to read offline
Datasheet




Central Management System
A Real-Time Local Exchange of Threat Data and Unified Management of Enterprise Deployments




Highlights                                   The FireEye Central Management System (CMS) consolidates
•	 Purpose-built appliance that can          the management, reporting, and data sharing of FireEye
   be deployed in about 30 minutes
                                             Malware Protection Systems (MPS) in an easy-to-deploy,
•	 Ideal for organizations with five
                                             network-based appliance.
   or more FireEye appliances to
   manage, or those using FireEye
   Web MPS, Email MPS, File MPS,             The CMS enables real-time sharing of malware intelligence auto-
   and/or MAS together.                      generated within your FireEye deployment to stop advanced attacks
•	 Two models available to                   targeting the organization. It also enables centralized configuration,
   accommodate growing                       management, and reporting of FireEye security appliances.
   FireEye deployments
•	 Streamlined centralized                   Real-time sharing of local malware intelligence
   management of multiple FireEye            FireEye appliances generate real-time advanced malware protections
   appliances reduces time spent             using the Virtual Execution (VX) engine. The CMS is a distribution hub
   managing configurations, threat           ensuring the entire FireEye deployment has dynamic protections against
   updates, and software upgrades
                                             the advanced targeted attack underway. In addition, subscribers to the
•	 At-a-glance security dashboard            Malware Protection Cloud (MPC) can use the CMS to centralize sending
   provides advanced targeted
                                             and receiving malware intelligence.
   attack protection status
•	 Consolidated security event
                                             At-a-glance security dashboard, plus drilldowns
   storehouse speed reports and audits
                                             The CMS consolidates activities and improves situational awareness with
                                             a unified security dashboard. The dashboard gives administrators a real-
                                             time view to see the number of infected systems and drill directly down
                                             to infection details to determine next steps.

                                             Unified analysis of advanced targeted attacks
                                             By deploying FireEye Web MPS, Email MPS, File MPS, and Malware
                                             Analysis System (MAS) with the FireEye CMS, it enables the detailed
                                             analysis of blended threats, such as pinpointing the spear phishing email
                                             used to distribute malicious URLs. Security analysts now have



                                             “Our college takes user security seriously, hence we enforce patches
                                              and antivirus on the desktop and use Firewalls and IPS systems on the
                                              gateway. But because of remote users who are infected outside our
                                              gateway, compounded by the reality of spear phishing, zero-day and
                                              targeted attacks, we realize that a signature-based solution does not
The dashboard provides a real-time
                                              provide complete protection against today’s Web exploits and botnets.”
view into the network’s security state and   — Systems and Server Manager, Liberal Arts College
appliance workloads
Datasheet



the ability to connect the dots of a blended attack                             appropriately. Administrators can remotely configure
for the actionable intelligence necessary to protect                            and view settings for a single appliance or a group
organizations against advanced targeted attacks.                                of appliances. Plus, appliance upgrades can be
                                                                                deployed to all managed appliances, ensuring the
Enterprise–class console and alerting                                           latest security capabilities across all appliances.
Events can be searched and filtered, and real-                                  Upgrades to the VX engine (such as new guest
time alert notifications can be sent via SMTP, SNMP,                            images to get the latest Service Pack) can be
syslog or HTTP POST or seen within the CMS’ Web GUI                             pushed out with a click of a button.
console. Administrators can filter by events, dates, or
IP ranges and results are scoped to only show data                              Consolidated storehouse and detailed reporting
accessible based on the administrator’s IT operational                          Larger and regulated organizations can leverage
role. Notifications can also be sent to third-party SIEM                        the CMS’ central security data storehouse for efficient,
tools such as ArcSight, Nitro Security, Splunk, and RSA.                        consolidated reporting. The CMS provides a means
                                                                                to collect and store audit-relevant security events to
From the CMS console, administrators can click on an                            meet long-term data retention requirements.
event link and connect seamlessly to specific FireEye
appliances to view the local management system                                  FireEye CMS provides convenient ways to search
and review the network segment being protected.                                 for and report on specific types of threats by name
                                                                                or type. Customers can also view summaries such
Central configuration and appliance upgrades                                    as the top infected hosts and top malware and
For efficient enterprise deployments, the FireEye                               callback events, including geo-location details.
CMS features dynamic configurations. Settings                                   Trending views can help demonstrate progress in
can be determined centrally and then distributed                                reducing the number of compromised systems.



Technical Specifications

                                                  CMS 4310                                         CMS 7300

  Form Factor                                     1U Rack-Mount                                    1U Rack-Mount

  Weight                                          30 lbs (13.6 Kg)                                 30 lbs (13.6 Kg)

  Dimensions (WxDxH)                              17.2” x 25.6” x 1.7” (43.7 x 65.0 x 4.3 cm)      17.2” x 25.6” x 1.7” (43.7 x 65.0 x 4.3 cm)

  Enclosure                                       Fits 19-Inch Rack                                Fits 19-Inch Rack

  Management Interfaces                           (2) 10/100/1000 BASE-T Ports                     (2) 10/100/1000 BASE-T Ports

  Monitoring Interfaces                           N/A                                              N/A

  AC Input Voltage                                Auto-switching 100 ~ 240 VAC Full Range          Auto-switching 100 ~ 240 VAC Full Range

  AC Input Current                                8.5-6 A                                          8.5-6 A

  Power Supply/RAID                               Dual / 3 SAS HDD in HW RAID5                     Dual / 3 SAS HDD in HW RAID5

  Frequency                                       50-60 Hz                                         50-60 Hz

  AC Power                                        700 W Max                                        700 W Max

  Ambient Temp                                    40° C                                            40° C




© 2012 FireEye, Inc. All rights reserved. FireEye is a trademark of FireEye, Inc. All other brands, products, or service names are or may
be trademarks or service marks of their respective owners. – DS.CMS.022012



FireEye, Inc. | 1390 McCarthy Blvd. Milpitas, CA 95035 | 408.321.6300 | 877.FIREEYE (347.3393) | info@fireeye.com | www.fireeye.com

More Related Content

More from FireEye, Inc.

More from FireEye, Inc. (18)

M-Trends 2015: 최일선에서 본 관점
M-Trends 2015: 최일선에서 본 관점 M-Trends 2015: 최일선에서 본 관점
M-Trends 2015: 최일선에서 본 관점
 
M-Trends 2015 セキュリティ最前線からの視点
M-Trends 2015 セキュリティ最前線からの視点M-Trends 2015 セキュリティ最前線からの視点
M-Trends 2015 セキュリティ最前線からの視点
 
M-Trends 2015 : Les nouvelles du front
M-Trends 2015 : Les nouvelles du frontM-Trends 2015 : Les nouvelles du front
M-Trends 2015 : Les nouvelles du front
 
5 Reasons Cyber Attackers Target Small and Medium Businesses
5 Reasons Cyber Attackers Target Small and Medium Businesses 5 Reasons Cyber Attackers Target Small and Medium Businesses
5 Reasons Cyber Attackers Target Small and Medium Businesses
 
Connected Cares: The Open Road For Hackers
Connected Cares: The Open Road For HackersConnected Cares: The Open Road For Hackers
Connected Cares: The Open Road For Hackers
 
M-Trends® 2013: Attack the Security Gap
M-Trends® 2013: Attack the Security GapM-Trends® 2013: Attack the Security Gap
M-Trends® 2013: Attack the Security Gap
 
M-Trends® 2012: An Evolving Threat
M-Trends® 2012: An Evolving Threat M-Trends® 2012: An Evolving Threat
M-Trends® 2012: An Evolving Threat
 
M-Trends® 2011: When Prevention Fails
M-Trends® 2011: When Prevention Fails M-Trends® 2011: When Prevention Fails
M-Trends® 2011: When Prevention Fails
 
M-Trends® 2010: The Advanced Persistent Threat
 M-Trends® 2010: The Advanced Persistent Threat M-Trends® 2010: The Advanced Persistent Threat
M-Trends® 2010: The Advanced Persistent Threat
 
SANS 2013 Report: Digital Forensics and Incident Response Survey
SANS 2013 Report: Digital Forensics and Incident Response Survey  SANS 2013 Report: Digital Forensics and Incident Response Survey
SANS 2013 Report: Digital Forensics and Incident Response Survey
 
SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...
SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...
SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...
 
2013 Incident Response Survey
2013 Incident Response Survey2013 Incident Response Survey
2013 Incident Response Survey
 
The Internal Signs of Compromise
The Internal Signs of CompromiseThe Internal Signs of Compromise
The Internal Signs of Compromise
 
The Board and Cyber Security
The Board and Cyber SecurityThe Board and Cyber Security
The Board and Cyber Security
 
FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach
FireEye Cyber Defense Summit 2016 Now What - Before & After The BreachFireEye Cyber Defense Summit 2016 Now What - Before & After The Breach
FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach
 
Proatively Engaged: Questions Executives Should Ask Their Security Teams
Proatively Engaged: Questions Executives Should Ask Their Security TeamsProatively Engaged: Questions Executives Should Ask Their Security Teams
Proatively Engaged: Questions Executives Should Ask Their Security Teams
 
FireEye Advanced Threat Protection - What You Need to Know
FireEye Advanced Threat Protection - What You Need to KnowFireEye Advanced Threat Protection - What You Need to Know
FireEye Advanced Threat Protection - What You Need to Know
 
FireEye Advanced Threat Report
FireEye Advanced Threat ReportFireEye Advanced Threat Report
FireEye Advanced Threat Report
 

FireEye Central Management System | Next Generation Threat Protection

  • 1. Datasheet Central Management System A Real-Time Local Exchange of Threat Data and Unified Management of Enterprise Deployments Highlights The FireEye Central Management System (CMS) consolidates • Purpose-built appliance that can the management, reporting, and data sharing of FireEye be deployed in about 30 minutes Malware Protection Systems (MPS) in an easy-to-deploy, • Ideal for organizations with five network-based appliance. or more FireEye appliances to manage, or those using FireEye Web MPS, Email MPS, File MPS, The CMS enables real-time sharing of malware intelligence auto- and/or MAS together. generated within your FireEye deployment to stop advanced attacks • Two models available to targeting the organization. It also enables centralized configuration, accommodate growing management, and reporting of FireEye security appliances. FireEye deployments • Streamlined centralized Real-time sharing of local malware intelligence management of multiple FireEye FireEye appliances generate real-time advanced malware protections appliances reduces time spent using the Virtual Execution (VX) engine. The CMS is a distribution hub managing configurations, threat ensuring the entire FireEye deployment has dynamic protections against updates, and software upgrades the advanced targeted attack underway. In addition, subscribers to the • At-a-glance security dashboard Malware Protection Cloud (MPC) can use the CMS to centralize sending provides advanced targeted and receiving malware intelligence. attack protection status • Consolidated security event At-a-glance security dashboard, plus drilldowns storehouse speed reports and audits The CMS consolidates activities and improves situational awareness with a unified security dashboard. The dashboard gives administrators a real- time view to see the number of infected systems and drill directly down to infection details to determine next steps. Unified analysis of advanced targeted attacks By deploying FireEye Web MPS, Email MPS, File MPS, and Malware Analysis System (MAS) with the FireEye CMS, it enables the detailed analysis of blended threats, such as pinpointing the spear phishing email used to distribute malicious URLs. Security analysts now have “Our college takes user security seriously, hence we enforce patches and antivirus on the desktop and use Firewalls and IPS systems on the gateway. But because of remote users who are infected outside our gateway, compounded by the reality of spear phishing, zero-day and targeted attacks, we realize that a signature-based solution does not The dashboard provides a real-time provide complete protection against today’s Web exploits and botnets.” view into the network’s security state and — Systems and Server Manager, Liberal Arts College appliance workloads
  • 2. Datasheet the ability to connect the dots of a blended attack appropriately. Administrators can remotely configure for the actionable intelligence necessary to protect and view settings for a single appliance or a group organizations against advanced targeted attacks. of appliances. Plus, appliance upgrades can be deployed to all managed appliances, ensuring the Enterprise–class console and alerting latest security capabilities across all appliances. Events can be searched and filtered, and real- Upgrades to the VX engine (such as new guest time alert notifications can be sent via SMTP, SNMP, images to get the latest Service Pack) can be syslog or HTTP POST or seen within the CMS’ Web GUI pushed out with a click of a button. console. Administrators can filter by events, dates, or IP ranges and results are scoped to only show data Consolidated storehouse and detailed reporting accessible based on the administrator’s IT operational Larger and regulated organizations can leverage role. Notifications can also be sent to third-party SIEM the CMS’ central security data storehouse for efficient, tools such as ArcSight, Nitro Security, Splunk, and RSA. consolidated reporting. The CMS provides a means to collect and store audit-relevant security events to From the CMS console, administrators can click on an meet long-term data retention requirements. event link and connect seamlessly to specific FireEye appliances to view the local management system FireEye CMS provides convenient ways to search and review the network segment being protected. for and report on specific types of threats by name or type. Customers can also view summaries such Central configuration and appliance upgrades as the top infected hosts and top malware and For efficient enterprise deployments, the FireEye callback events, including geo-location details. CMS features dynamic configurations. Settings Trending views can help demonstrate progress in can be determined centrally and then distributed reducing the number of compromised systems. Technical Specifications CMS 4310 CMS 7300 Form Factor 1U Rack-Mount 1U Rack-Mount Weight 30 lbs (13.6 Kg) 30 lbs (13.6 Kg) Dimensions (WxDxH) 17.2” x 25.6” x 1.7” (43.7 x 65.0 x 4.3 cm) 17.2” x 25.6” x 1.7” (43.7 x 65.0 x 4.3 cm) Enclosure Fits 19-Inch Rack Fits 19-Inch Rack Management Interfaces (2) 10/100/1000 BASE-T Ports (2) 10/100/1000 BASE-T Ports Monitoring Interfaces N/A N/A AC Input Voltage Auto-switching 100 ~ 240 VAC Full Range Auto-switching 100 ~ 240 VAC Full Range AC Input Current 8.5-6 A 8.5-6 A Power Supply/RAID Dual / 3 SAS HDD in HW RAID5 Dual / 3 SAS HDD in HW RAID5 Frequency 50-60 Hz 50-60 Hz AC Power 700 W Max 700 W Max Ambient Temp 40° C 40° C © 2012 FireEye, Inc. All rights reserved. FireEye is a trademark of FireEye, Inc. All other brands, products, or service names are or may be trademarks or service marks of their respective owners. – DS.CMS.022012 FireEye, Inc. | 1390 McCarthy Blvd. Milpitas, CA 95035 | 408.321.6300 | 877.FIREEYE (347.3393) | info@fireeye.com | www.fireeye.com