Table of Contents
Advertisement
Architecture
This chapter includes the following topics:
■
■
■
About Symantec Network Security
This chapter describes the underlying architecture of both the Symantec
Network Security core software and the Symantec Network Security 7100 Series
appliances. It describes how the components work together to gather attack
information, analyze behavior, and initiate effective responses.
The Symantec Network Security software and the Symantec Network Security
7100 Series appliance employ a common core architecture that provides
detection, analysis, storage, and response functionality. Most procedures in this
section apply to both the 7100 Series appliance and the Symantec Network
Security 4.0 software. The 7100 Series appliance also provides additional
functionality that is unique to an appliance. Each section describes this
additional functionality in detail.
About the core architecture
Symantec Network Security's challenges are to detect malicious or
unauthorized behavior, to analyze the behavior, and to determine an
appropriate response. Symantec Network Security provides a three-pronged
approach to meet this challenge: detection, analysis, and response. The
following diagram describes this basic approach:
About Symantec Network Security
About the core architecture
About management and detection architecture
Chapter
2
Advertisement
Table of Contents
