QTS Solution Spotlight:
Symantec Event Manager

Overview

Symantec Event Manager builds upon Symantec's Enterprise Security Architecture ("SESA") framework to provide a solution for centralized consolidation and reporting of security information.  Event Manager leverages a variety of "collectors" that collect data from a variety of antivirus (Symantec, McAfee, Trend), firewall (Symantec, Cisco, Check Point, others) and Intrusion Detection/Protection (Symantec, ISS, others) into a centralized database, where a variety of reports can be generated to manage and monitor security across the organization.

Symantec Incident Manager builds upon Event Manager to provide for analysis of incidents and consolidation of multiple events into "incidents" (i.e., a worm may trigger hundreds of alerts, but the worm represents one distinct "outbreak" and is therefore one incident), as well as an incident tracking system for security management.

Symantec Event Manager runs on one or more Windows 2000 or 2003 Servers, and utilizes a DB2 database (with SQL Server support planned for a future release).

Key Benefits

Symantec Event Manager provides a number of benefits, including:

• Centralized consolidation of all security events from your security management technologies, both Symantec and multi-vendor;
• Comprehensive reporting and event management tools;
• Ability to analyze event histories and identify areas for security improvement.

Additional Information

Contact your QTS account manager for more information on how Symantec Event Manager can fit into your environment, and what benefits you would realize.

This site last updated 03/31/05
© 1999 Quality Technology Solutions, Inc.
201 Littleton Road, Morris Plains, New Jersey 07950
telephone: 973.984.7600       fax: 973.984.7650
email: info@qtsnet.com