Please share with the community what you think needs improvement with McAfee Total Protection for Data Loss Prevention.
What are its weaknesses? What would you like to see changed in a future version?
The interface is very complicated to use and it is easy to forget how it works. There needs to be support for blocking the sending of files by email because even if you block or remove an external disk, the files are not protected. As long as the files can still be sent via email, it is useless to protect them from being copied to an external drive.
The technology would provide a DLL hook injection into memory to monitor processes as they were inserted into memory. Assuming they pass the other tests from the AV side, and they're allowed to be inserted into the memory, then the DLL hooks allowed the product to monitor those processes for injection, or for any risk. That worked some of the time but didn't work on everything. We found ways to inject code into processes that were being monitored and it was a silent failure. The solution didn't see everything. It did a good job of just stopping the insertion of malicious code from normal sources, but more advanced items it didn't catch. It was a silent failure on some of the more advanced attacks. The solution needs an easier integration in heterogeneous and dynamic environments. The product needs to offer more protection for memory-based attacks.
One thing that would help us is if the McAfee agent that we install on virtual machines became lighter. It is a bit heavy for installation on virtual machines and it uses too much in the way of resources. It takes a lot of the CPU, the RAM, and other resources in comparison to some other application like Kaspersky. Kaspersky Security Solution is a lighter solution than McAfee. McAfee is a little heavy for many installations and does not work for all clients and situations. It would also be good if the McAfee solution contained specialized features just for the virtual desktop. Some brands of security solutions already have this type of feature which makes it easier to use them for desktop virtualization. I can not find that currently in the McAfee product.
Both the pricing and the support for this product could be improved. I think the support comes at a very high cost. In our case, there are some regions where we do not pay McAfee for support because they do not provide the support quickly or they do not have the capacity to support our needs completely. It depends on the case and where the client is. It is not just the support that is expensive, I would like to see better pricing for the product licensing. Feature-wise, I would like enhancements added to the GUI interface to make it more well-designed, user-friendly, and user-intuitive while adding other features to help users work with the product more easily.