McAfee® HIPS® agents protects desktops and servers against zero-day and known attacks. As the only host intrusion prevention system (IPS) combining behavioral rules, signatures and a system firewall, McAfee HIPS provides unmatched proactive threat protection of critical systems and applications, preserving the confidentiality of data and ensuring business availability.

• Zero-day attack protection - McAfee HIPS agents provide zero-day protection against new attacks with no updates, significantly decreases the criticality of patch deployment and giving enterprises time to research, test and deploy patches.
• Risk Mitigation - The three complementary attack prevention technologies: behavioral rules, attack signatures and system firewall, proactively blocks threats before they can compromise critical systems and data, rather than simply detecting attacks after the fact
• Optimize cost of ownership - HIPS lowers costs by mitigating patch criticality and minimizing resources needed to deploy and maintain protection
• Ensure business availability & data confidentiality -Preconfigured, customizable policies enable maximum accuracy of detection for any environment, enabling business to protect critical systems and data, and satisfy regulatory requirements

Three layers of protection
HIPS deploys the most robust protection available to protect enterprises from attack. Behavioral rules that block zero-day and enforce proper operating system and application behavior, Signatures that block known attacks and provide administrators complete understanding of the threats they face, and a system firewall that ensures compliance to application and system access policies.

Buffer overflow exploit prevention
Patented McAfee HIPS technology prevents code execution resulting from buffer overflow attacks, one of the most common methods of attacking servers and desktops.

Application Shielding and Enveloping
Prevents compromise of applications and their data, as well as prevents the application from being used to attack other applications, even by user with administrative privileges.

Web Server and Database Server Protection
Server agents contain unique protection engineered specifically for to protect Web Servers and Database Servers from attacks like directory traversal and SQL injection attacks.

Desktop Application Protection
Desktop agents contain unique protection for commonly exploited applications like Internet Explorer and Microsoft Outlook.

Customizable policy templates
HIPS ships with a set of fully configured default templates for rapid product deployment. It includes powerful customization features to modify policies as needed, virtually eliminating false positives and the risk of blocking business-critical process.

Enterprise scalability
Deploy and manage up to 10,000 agents with a single McAfee HIPS management server; manage up to 100,000 agents with McAfee ePolicy Orchestrator.

Complements existing security infrastructure
HIPS will not interfere with existing security tools, and does not require changes to operating systems, applications or data