The Enterprise Manager

A network might include hundreds, or perhaps thousands of computer workstations that require the attention of the system administrators to ensure that they are properly configured, connected to the network, secure, and contain correct software. The larger the network, the more daunting a task this becomes, particularly if administrators must provide such services in real-time.

eTrust Intrusion Detection's Enterprise Manager provides administrators with an easy-to-use tool to remotely control and configure eTrust Intrusion Detection systems in real-time. The diagram below represents the structure of eTrust Intrusion Detection's Enterprise Management System.

How It Works

The Enterprise Management System consists of three components: the Management Console, the Server, and the Agent (the latter two are services). All client-server activity is performed between the Server and Agent services.

The Server performs the following functions:

Sends UDP broadcasts and compiles list of all eTrust Intrusion Detection stations that have Agent installed (these stations will respond to the UDP broadcast). Queries the status and properties of eTrust Intrusion Detection stations. Presents this information to the Management Console.

The Management Console presents station information to the user and submits all control jobs, such as uploading definite rule sets to an eTrust Intrusion Detection station. Although the Management Console will submit the job, the actual job will be performed by the Agent service, which receives commands from the Server. In addition, the Management Console performs the following functions:

Presents a list of available stations with the component names and the rule sets installed on each one. Provides the means to form groups of stations to facilitate uploading of rule sets by groups. Presents station properties, including status, installed rule set, and whether or not Data Client is installed. Maintains view of available rule sets and launches Rules Configuration utility for adding/modifying existing rule sets. Enables submission of jobs to Management Server and presents view of running jobs.

User Interface

eTrust Intrusion Detection's Management Console provides the user with three main views: Stations, RuleSets, and Jobs. Pictured below, the Management Console provides, at a glance, important and timely information about the eTrust Intrusion Detection stations in the network, and gives you the ability to perform certain configuration and job submission functions.