Table of Contents
Advertisement
34 Architecture
About management and detection architecture
About the node architecture
RestrictedUsers: A user authenticated with partial read-only capabilities.
■
This user is allowed to view most information in the Network Security
Console with the exception of some advanced information and
network-sensitive data.
The Network Security software node or 7100 Series appliance node contains a
variety of tools and techniques that work together to gather attack information,
analyze the attacks, and initiate responses appropriate to specific attack
circumstances.
The following diagram illustrates how Symantec Network Security's arsenal of
tools work together to provide protection:
Figure 2-2
Core architecture of a software or appliance node
Alert Manager
Event Stream Provider
Sensor Process
The components of the core node architecture apply to both Network Security
software nodes and 7100 Series appliance nodes as follows:
About the alert manager
■
About the sensor manager
■
About the administration service
■
About analysis
■
About the databases
■
About Event Stream Provider
■
Sensor Manager
Analysis
Smart Agent Receiver
Admin Service
(QSP Proxy)
Databases
FlowChaser
Advertisement
Table of Contents
