- Quarantine Protection for automated event response
- Automated security updates
- Systems management integration
- Security device configuration and monitoring
- Advanced forensic analysis
- Enterprise security reporting and trend analysis
- At-a-glance dashboard
- Bandwidth management
The HP Security Management System Appliance series delivers enterprise-class security management capabilities to all HP security products and is easy to use, reducing IT administrative costs to maintain and manage security solutions. The Security Management System Appliance is a hardened appliance that provides both global vision and security policy control for large-scale deployments of all HP products, including HP Intrusion Prevention Systems, Core Controllers, and SSL Appliances. The appliance is responsible for discovering, monitoring, configuring, diagnosing, remediating, and reporting for global IPS deployments.
Quarantine Protection is included with the HP Security Management System Appliance and is an automated response system that allows IT administrators to specify an action in response to a security event; this can range from directing a user to a self-remediation site, generating a trouble ticket, or, if the event is severe enough, moving them to a secure VLAN or removing them from the network.
The HP Digital Vaccine Labs security research team constantly researches security threats and software vulnerabilities and distributes protection filters to customers through regular Digital Vaccine updates to protect customer systems from emerging threats; the Security Management System Appliance is central to the distribution of these updates and can be configured to automatically check for, download, and distribute these updates.
The HP Security Management System Appliance is the network solution component of an organization's management infrastructure; the appliance will integrate with systems such as HP OpenView and other enterprise system management tools; with the appliance, blocked attacks, quarantine actions, and security configuration updates can all be tracked and reported as events of interest.
Security Management System Appliance management can be used to drill down deep into the internal workings of the security devices themselves; in addition, a single appliance client can operate across multiple appliances for even greater scalability; network parameters as well as HP system and filter behaviors can be viewed, assessed, and tuned from one interface.
The global visibility provided by the Security Management System Appliance allows a continual view of security event logs for immediate cyber attack containment, perpetrator location and identification, and damage mitigation.
When HP Intrusion Prevention Systems block attacks or otherwise enforce customer security policies, event data is automatically logged to system files in the Security Management System Appliance; several reporting options are available regarding the compiled log information, including "big-picture" analysis with trending reports, correlation, and real-time graphs on traffic statistics, and filtered attack events.
A dashboard provides at-a-glance monitoring and launching capabilities into targeted management applications, and displays an overview of current performance for all HP systems in the network, including notifications of updates and potential problems that may need attention.
In addition to protecting networks from attacks, HP Intrusion Prevention Systems can also be used to regulate network usage and availability for mission-critical applications; the Security Management System Appliance can easily be used to set policies for blocking or rate limiting traffic related to rogue applications, such as peer-to-peer file sharing and streaming media, which can consume available network bandwidth and interfere with mission-critical applications.