Symantec 10744983 - Mail Security 8320, Administration Manual

Page: 221 / 249

Integrating Symantec Mail
Security with Symantec
Security Information
Manager
This appendix includes the following topics:
■
About Symantec Security Information Manager
■
Interpreting events in the Information Manager
About Symantec Security Information Manager
In addition to using the Symantec Mail Security for SMTP logging features, you
can also log events to the Symantec Security Information Manager appliance for
event management and correlation. Symantec Security Information Manager
(SSIM) integrates multiple Symantec Enterprise Security products and third-party
products to provide a central point of control of security within an organization.
It provides a common management framework for Information Manager-enabled
security products, such as Symantec Mail Security for SMTP, that protect your
IT infrastructure from malicious code, intrusions, and blended threats. The
Information Manager increases your organization's security posture by simplifying
the task of monitoring and managing the multitude of security-related events
and products that exist in today's corporate environments.
The event categories and classes include threats, security risks, content filtering,
network security, spam, and systems management. The range of events varies
depending on the Symantec applications that are installed and managed by the
A
Appendix