Threat Management Center (TMC)

The TMC offers

• Multi-tier management structure with separated user privileges.
• Logical Grouping of various devices based on Rule Sets/Network Segmentation/Associated Companies or Locations.
• Simple addition of APDs to an existing group - the new APDs automatically inherit the Group properties.
• Classification of rules for easy deployment.
• Extensive drill down reporting facility including complete packet contents.
• Ability to remotely enable/disable APDs - All APDs have multiple modes of deployment.
• Central reporting, all devices report back to the TMC to provide a view high level view of the network security posture.
• Secure remote access from any web browser.

Flexibility in device management is key to simplifying IPS deployments. The CounterSnipe TMC plays an integral role in providing this flexibility. Sensor grouping, staging the transition between detection and prevention, signature classifications and learning mode are just some of the advantages the CounterSnipe APD solution offers.

The management interface allows for robust housekeeping functionality that includes remote backups of configuration data, detail analysis of the system log files, graphing of system performance parameters and analysis of alerts. It also allows you quickly convert to run the device in alert mode for debugging.

On-line documentation and updates of both signature rules and management software makes it easy to maintain the machine in an optimal and secure state.

SAK based accurate Threat alert Management

• Zero false alerts.
• Prioritised alert management.
• Full correlation between Snort and Vulnerability database.
• One time non repetitive alerting.

Scalability for the enterprise network

• Role Based Access Control
• Event summaries
• Centralized Management
• Deep drill-down packet information
• Sensor grouping
• Scalable signature policies
• Incident Management

Dashboard

• The dashboard is a single high level view of both device configuration status (how healthy are your sensors and management console) and event overview. It provides the user an immediate view of the events detected and/or attacks removed by the APD.

Device Configuration

• Every sensor is configured via the central management console, this includes basic operating requirements such as date, time, email and IP, along with advanced policy options. Decisions can be made about how each device should react to a policy infringement.

Group Management

• Rather than administer devices separately, it is possible to add them to a group. This simplifies management of multiple sensors and provides the administrator with the ability to push out similar configuration changes to many systems at the same time.