Novell SENTINEL 6.1 SP2, Руководство пользователя, Страница: 21 / 528

Sentinel Control Center
1
21
no
vd
ocx
(e
n)
7 Ja
nua
ry 201
0
1
Sentinel Control Center

Section 1.1, “About Sentinel Control Center,” on page 21

Section 1.2, “Log in to the Sentinel Control Center,” on page 24

Section 1.3, “Introduction to the User Interface,” on page 25
1.1 About Sentinel Control Center
Sentinel
TM
is a Security Information and Event Management solution that receives information from
many sources throughout an enterprise, standardizes it, prioritizes it and presents it to you to make
threat, risk and policy related decisions. The Sentinel Control Center (SCC) is the main user
interface for viewing and interacting with this data.
Sentinel gathers and correlates security and non-security information from across an organization's
networked infrastructure, as well as third-party systems, devices and applications. Sentinel presents
the collected data in a more sensible GUI, identifies security or compliance issues, and tracks
remediation activities, streamlining previously error-prone processes and building a more rigorous
and secure management program.
The Sentinel Control Center includes the following functional tabs and interfaces:
 Section 1.1.1, “Active Views,” on page 21

Section 1.1.2, “Incidents,” on page 22
 Section 1.1.3, “iTRAC,” on page 22

Section 1.1.4, “Analysis,” on page 22
 Section 1.1.5, “Advisor,” on page 22

Section 1.1.6, “Admin,” on page 22
 Section 1.1.7, “Correlation,” on page 23

Section 1.1.8, “Event Source Management,” on page 23
 Section 1.1.9, “Solution Packs,” on page 24

Section 1.1.10, “Identity Integration,” on page 24
1.1.1 Active Views
The Active Views tab presents events in near-real time.
In the Active Views tab, you can:

View events occurring in near real-time
 Investigate events

Graph events
 Perform historical queries to collect data for a specified period

Invoke right-click functions
 Initiate manual incidents and remediation workflows