Here comes my soapbox again. It’s always a joke to me how some so-called ‘Security’ companies can have a total lack for Certification for their Cryptography and call themselves security companies. It’s like saying your grandma is a jet fighter pilot because she saw you playing flight simulator. It’s an embarrassment.

 What about ePO, or HBSS, McAfee’s be all - end all managment console that communicates to all the clients. ZERO certifications, ZIP, Zilch, Nada. What about certifications that cover anything above Windows XP, nope.

Do you know McAfee has NEVER done a certification for FIPS on it’s own? Only through acquisition of SafeBoot do they have ANY certifications. What a joke!

Just so no one says that I’m talkign out of school, here is a copy of all of McAfee’s certifications form the NIST website at [1] www.nist.gov/cmvp

It’s always funny to me how people can spend MIllions of dollars on marketing, but not spend on building a quality product