Table of Contents
Advertisement
SiteProtector Components
The SiteProtector SP1001 appliance consists of required and optional SiteProtector
components that provide the base functionality necessary to accept, monitor, and
analyze network events. Depending on your Site requirements, you may need to
install more than one of some components.
Component descriptions
The following table describes the SiteProtector components:
SiteProtector Component
Console
Event Collector
Site Database
SP Core
SiteProtector Firmware
Agent Manager
Description
Use the SiteProtector Console to perform
most SiteProtector functions, such as
monitoring events, scheduling scans,
generating reports, and configuring agents.
You can also use the SiteProtector Console to
configure the SiteProtector SP1001
appliance's administration options.
The Event Collector manages real-time
events from agents and vulnerability data
from scanners.
The SiteProtector database stores raw agent
data, occurrence metrics (statistics for
security events triggered by agents), group
information, command and control data, and
the status of X-Press Updates (XPUs).
The SP core includes the following
components:
v The Application Server, which includes
the Sensor Controller component, enables
communication between the SiteProtector
Console and the SiteProtector database.
v The X-Press Update Server stores X-Press
Updates (XPUs) downloaded from the
IBM ISS Download center and makes
them available to the agents and
components on the network. The Update
Server eliminates the need to download
updates for similar products more than
once and allows users to manage the
update process more efficiently.
v SiteProtector Web Access is a interface
that provides easy access to SiteProtector
for running reports and monitoring assets
and security events.
SiteProtector firmware consists of the
operating system and the database that runs
on the SiteProtector SP1001 appliance
hardware.
The Agent Manager manages the command
and control activities of the Desktop
Protection agents, Proventia Server IPS and
Proventia Network MFS, and X-Press
Update Server; and it also facilitates data
transfer from agents to the Event Collector.
Chapter 1. Introduction to the SiteProtector SP1001 Appliance
3
Advertisement
Table of Contents
