Novell Sentinel Rapid Deployment 6.1, Installation Manual

Page: 16 / 84

16 Sentinel 6.1 Rapid Deployment Installation Guide
no
vd
ocx
(e
n)
17
Sep
te
m
be
r 20
09
An Advisor data snapshot is installed by default with Sentinel 6.1 Rapid Deployment installation.
You need an Advisor license to subscribe to the ongoing Advisor data updates.
1.3.8 Web Server
Sentinel 6.1 Rapid Deployment uses Apache* Tomcat as its Web server to allow secure connection
to the Sentinel Rapid Deployment Web interface.
1.4 Sentinel Plug-Ins
Sentinel supports a variety of plug-ins to expand and enhance system functionality. Some of these
plugins are pre-installed. Additional plugins (and updates) are available for download at
Sentinel
Content Page (http://support.novell.com/products/sentinel/sentinel61rd.html) .
Some plugins, such as the Remedy* Integrator, the IBM* Mainframe Connector, and the Connector
for SAP* XAL, require an additional license for download.

Section 1.4.1, “Collectors,” on page 16
 Section 1.4.2, “Connectors and Integrators,” on page 17

Section 1.4.3, “Correlation Rules and Actions,” on page 17
 Section 1.4.4, “Reports,” on page 17

Section 1.4.5, “iTRAC Workflows,” on page 17
 Section 1.4.6, “Solution Packs,” on page 17
1.4.1 Collectors
Sentinel collects data from source devices and delivers a richer event stream by injecting taxonomy,
exploit detection, and business relevance into the data stream before events are correlated and
analyzed and sent to the database. A richer event stream means that data is correlated with the
required business context to identify and remediate internal or external threats and policy violations.
Sentinel Collectors can parse data from the types of devices listed below and more:
JavaScript Collectors can be written by using the standard JavaScript development tools and the
Collector SDK. Proprietary (or Legacy) Collectors can be built or modified by using the Sentinel
Collector Builder, which is, a standalone application included with the Sentinel system. For more
information, see
Section 1.2.6, “Sentinel Collector Builder,” on page 14 .

Intrusion Detection Systems (host)

Intrusion Detection Systems (network)

Firewalls

Operating Systems

Policy Monitoring

Authentication

Routers and Switches

VPNs

Anti-Virus Detection Systems

Web Servers

Databases

Mainframe

Vulnerability Assessment Systems

Directory Services

Network Management Systems

Proprietary Systems