Enterasys® NMS Automated Security Manager

Security Incident Automated Response Management

Enterasys NMS Automated Security Manager (also known as NetSight® Automated Security Manager) is a unique threat response solution that translates security intelligence into security enforcement. It interoperates with the Enterasys Intrusion Prevention System (IPS) and third-party network security appliances to automate responses to security incidents, remediating threats in real-time. It ensures that corporate data is protected, secure, and available.

Enterasys NMS Automated Security Manager executes policy-based rules, and when triggered, maps IP addresses to ports and takes assigned actions. The range of possible response actions is broad and configurable, including quarantining the user, disabling the switch port, or rate-limiting the traffic flow. Taking the action does not disrupt other users.

Combined with Enterasys NMS Policy Manager and IPS, Enterasys NMS Automated Security Manager provides sophisticated identification and management of threats and vulnerabilities. For example, when notified by the IPS, Enterasys NMS Automated Security Manager can determine the exact source location of a threat, determine a response based on the security policy, and trigger the configured action on the network switch.



Related Information