Solution Packs - Novell SENTINEL RAPID DEPLOYMENT 6.1 - 12-2009 User Manual

Solution Packs

1 4
Solution Packs allow Novell
specific business problems. They provide a framework within which sets of content can be packaged
into controls, each of which is designed to enforce a specific business or technical policy. The
control can use any of the detection, filtering, alerting, and response features of Sentinel
provide documentation on control status and enforcement. By managing the set of content as a unit
within the control, the Solution Pack solves dependency problems and simplifies implementation.
Section 14.1, "Solution Packs," on page 311
Section 14.2, "Solution Manager," on page 314
Section 14.3, "Managing Solution Packs," on page 316
Section 14.4, "Solution Designer," on page 331
Section 14.5, "Deploying an Edited Solution Pack," on page 340
14.1 Solution Packs
Controls within a Solution Pack can include the following types of content:
Correlation rule deployments, including deployment status and associated correlation rules,
correlation actions, including JavaScript plug-ins and integrators, and dynamic lists
Reports
iTRAC workflows, including associated roles
TM
Event enrichment, including map definitions and event meta tag configuration
Other associated files added when the Solution Pack is created, such as documentation,
example report PDFs, or sample map files.
Although Solution Packs have many uses, one of the most important use is to package content
related to governance and regulatory compliance into a comprehensible and easily enforceable
framework that is easy to deploy. Novell and its partners offer and extend Solution Packs around
such regulations or other customer needs.
Solution Packs are created with Solution Designer application. Using this tool, a user creates the
Solution Pack, associated controls and documentation (including implementation and testing steps),
and then associates Sentinel content with each control. The entire package is then exported as a ZIP
file.
The ZIP file containing the Solution Pack is imported and deployed into an existing Sentinel system
by using the Solution Manager in the Sentinel Control Center. The Solution Manager displays
implementation and testing steps in the Solution Pack and tracks the status of each control. At any
time, users can generate a detailed document with implementation status for each control.
Section 14.1.1, "Components of a Solution Pack," on page 312
Section 14.1.2, "Permissions for Using Solution Packs," on page 313
®
partners, and customers to create and easily manage solutions to
14
, as well as
TM
Solution Packs 311