Enterasys Dragon® Enterprise Management Server DSEMA7-LE User Manual
Product codes
DSEMA7-LE
Page 1 of 4 • Data Sheet
• Scalable client server
architecture
— Distributed Client/Server
application support for
“Role” based control
“Role” based control
— Intuitive user interface
simplifies administration,
deployment
deployment
• Centralized license
management
— Central stored and
distributed licenses for
Dragon sensors simplifies
deployment
Dragon sensors simplifies
deployment
• Continuous signature
updates
— Live Update automatically
downloads new signature s
and notifies when customer
policies are affected
and notifies when customer
policies are affected
• Custom signature
development
— Create signatures to
detect events most critical
to each enviro n m e n t
to each enviro n m e n t
• Event analyzer
— View events in real time
or from a historical
perspective
perspective
• Management reports
— Easy-to-understand
aggregated data on
events detected, classified
by level of attack and the
timeframe of detection
events detected, classified
by level of attack and the
timeframe of detection
• Session reconstruction
— View an entire event
session, including the
packets involved
packets involved
• Key Component of
Enterasys’ DIR solution
— Enables DIR, which
provides networks with
Intrusion Prevention
Intrusion Prevention
Dragon
®
Enterprise Management Server
•
Tools and technology for highly scalable management and decision
support across the enterprise
support across the enterprise
•
Includes policy management tools, security information management
tools and event flow processors
tools and event flow processors
•
Management for Host IDS, Web Server IPS, Event Flow Processors,
Network IDS and IPS in one console
Network IDS and IPS in one console
Complete Monitoring and Control
Dragon Enterprise Management Server
(EMS) is made up of a number of highly
integrated technologies. Dragon 7.0’s
client-server based Dragon Management
tools offer easy-to-use enterprise-wide
management of small to large-scale
Dragon deployments. Dragon Management
provides centralized management and
monitoring of all Dragon components,
while Alarmtool offers centralized man-
agement of many methods of event notifi-
cation and can execute firewall changes
or other actions in response to attacks.
(EMS) is made up of a number of highly
integrated technologies. Dragon 7.0’s
client-server based Dragon Management
tools offer easy-to-use enterprise-wide
management of small to large-scale
Dragon deployments. Dragon Management
provides centralized management and
monitoring of all Dragon components,
while Alarmtool offers centralized man-
agement of many methods of event notifi-
cation and can execute firewall changes
or other actions in response to attacks.
Dragon 7.2 provides a new grouping func-
tionality that eases the process of pushing
out common policies to like sensors.
tionality that eases the process of pushing
out common policies to like sensors.
A centralized collection point for all security
alert information, Dragon Reporting
applications provide monitoring, analysis,
and reporting of security events through
real-time trending, forensics and executive
reporting consoles.
alert information, Dragon Reporting
applications provide monitoring, analysis,
and reporting of security events through
real-time trending, forensics and executive
reporting consoles.
Event Flow Processors enable Dragon
Intrusion Defense Systems to scale to
support very large deployments. Event Flow
Processors aggregate events from network
and host sensors and forward them to the
Enterprise Management Server.
Intrusion Defense Systems to scale to
support very large deployments. Event Flow
Processors aggregate events from network
and host sensors and forward them to the
Enterprise Management Server.
Dragon Enterprise Management Server
is an integral component of Enterasys’
Dynamic Intrusion Response (DIR)
solution. Dynamic Intrusion Response
is a solution that delivers network-wide
intrusion prevention services to the enter-
prise. Dragon Enterprise Management
S e r v e r, operating with Enterasys’ NetSight
Automated Security Manager application,
provides pinpoint threat responses,
including mitigation of threat sources at
the point they enter the network.
is an integral component of Enterasys’
Dynamic Intrusion Response (DIR)
solution. Dynamic Intrusion Response
is a solution that delivers network-wide
intrusion prevention services to the enter-
prise. Dragon Enterprise Management
S e r v e r, operating with Enterasys’ NetSight
Automated Security Manager application,
provides pinpoint threat responses,
including mitigation of threat sources at
the point they enter the network.
?,9013764-2_Drag_EMS_DS 1/23/06 1:55 PM Page 1