Managing Symantec Gateway Security 400 Series Through Sesa - Symantec 460R - Gateway Security Administrator's Manual

Managing Symantec Gateway Security 400 Series through SESA

Symantec Event Manager and Advanced Manager for Security Gateways (Group 2) v2.1 are integrated with
the Symantec Enterprise Security Architecture (SESA) to provide a common framework to manage multiple
Symantec Gateway Security 400 Series appliances and third-party products from a single, centralized
location.
The SESA framework consists of a set of scalable, extensible, and secure technologies that make integrated
security products interoperable and manageable, regardless of the size and complexity of your network.
When managing security gateways through SESA, you can manage multiple security gateways from a
single user interface, regardless of the network on which your SESA Manager resides. You can group them
to reflect your organizational structure and create common configurations that are shared by security
gateways that have the same security postures.
The event management capabilities of Symantec Event Manager, installed with Symantec Advanced
Manager, give you up-to-date information that you need to make informed decisions about the security of
your network and related devices.
See the Symantec Event Manager and Advanced Manager for Security Gateways (Group 2) v2.1
Administrator's Guide for details on using the Symantec Management Console.
Symantec Advanced Manager for Security Gateways (Group 2) v2.1
Symantec Advanced Manager for Security Gateways is a software security solution, installed on the SESA
Manager computer, that plugs into the Symantec management console. It provides a Web-based graphical
user interface through which you can monitor and organize a large number of security gateways, along
with other SESA-compliant products.
Advanced management through SESA lets you manage both policies and location settings of connected
security gateways, in addition to collecting events from those systems. SESA management also provides
scalable management by allowing multiple security gateways to share common policies and location
settings.
SESA management provides many features important to centralized and scalable management, including:
The Symantec Advanced Manager also includes the Symantec Event Manager for Security Gateways
(Group 2) v2.1 product (described in the next section) for centralized event logging, alerting and reporting.
Symantec Event Manager for Security Gateways (Group 2) v2.1
Symantec Event Manager for Security Gateways is a standards-based software security solution that
provides centralized logging, alerting, and reporting across Symantec's security gateway protection
solutions and select third-party products.
Symantec Event Manager delivers security information to the SESA DataStore, letting you see a
centralized, consistent view of your security events from the Symantec management console. Security
events and log messages can be viewed in a variety of predefined or custom report formats.
By collecting and formatting information from Symantec and third-party supported products, the
Symantec Event Manager consolidates and normalizes security event data, making impending threats
more easily identifiable.
Logical grouping of security gateways into organizational units
Management of multiple configurations
Sharing of configurations across security gateways
Validation of multiple configurations in a single action
Distribution of configurations to many security gateways in a single action
Introducing the Symantec Gateway Security 400 Series 11
Key features