Symantec 10521146 - Network Security 7120, Administration Manual

Page: 284 / 392

284 Advanced configuration
Integrating third-party events
The following diagram illustrates Symantec Network Security integrating with
third-party intrusion detection systems via Symantec Network Security Smart
Agents to provide enterprise-wide correlation and analysis:
You can set response actions via third-party sensors using Smart Agents. All
response actions work for Smart Agents with the exception of TCP Reset and
Traffic Record. You can set export flows, TrackBack, email and SNMP
notification responses on events received via Smart Agents.
This section includes the following Smart Agent parameter:
■
Setting EDP Port Number
Setting EDP Port Number
Symantec Network Security communicates with Smart Agents over an EDP
proxy (Event Dispatch Protocol). In order to enable a software or appliance node
to receive event data from an Smart Agent, the Smart Agent must share an EDP
passphrase with the software or appliance nodes. You set the EDP passphrase on
the node when you create the external sensor device object in the topology tree.
Smart
Agent
Smart
Agent
Smart
Agent
Symantec
Network
Security