Table of Contents
Advertisement
Reporting Service
The Reporting service allows for reporting, including historical and vulnerability reports. Sentinel
comes with out-of-the-box reports and enables users to configure their own reports using Jasper
Reports. Some examples of reports included with Sentinel are:
Trend analysis
Security status of lines of business or critical assets
Attack types
Targeted assets
Response times and resolution
Policy compliance violations
Advisor
Sentinel Advisor, cross-references Sentinel's real-time alert data with known vulnerabilities and
remediation information, bridging the gap between incident detection and response. With Advisor,
organizations can determine if events exploit specific vulnerabilities and how these attacks impact
their assets. Advisor also contains detailed information on the vulnerabilities that attacks intend to
exploit, the potential effects of the attacks if successful and necessary steps for remediation.
Recommended remediation steps are enforced and tracked by using iTRAC incident response
processes.
Health
The Health service enables users to get a comprehensive view of the distributed Sentinel platform. It
aggregates health information from various processes that are typically distributed on various
servers. The health information is periodically displayed on the Sentinel Control Center for the end
user.
Administration
The Administration facility allows for user management and settings facilities typically needed by
application administrators of Sentinel.
Common Services
All of the components in this business logic layer of the architecture are driven by a set of common
services. These utility services assist in fine-grained filtering (through the filter engine) of events to
users, continuous monitoring of system health statistics (through the Health Monitor) and dynamic
updates of system wide data (through the Map Service). Together, these utility services form the
fabric of the loosely coupled services that allow for unparalleled processing and scaling over the
message bus-based transport for real-time analytics and computation.
A.4.3 Presentation Layer
The presentation layer renders the application interface to the end user. The Sentinel Control Center,
the Sentinel 6.1 Rapid Deployment Web interface are the two comprehensive dashboards that
present information to the user, and the Active Browser helps in viewing the selected events.
"Sentinel 6.1 Rapid Deployment Web Interface" on page 410
Sentinel 6.1 Rapid Deployment Architecture 409
Advertisement
Table of Contents
