Hi,
We are in the process of designing our IDS network to monitor our entire network.The ISS components which we are going to install are Site protector 1.0, Server sensor 6.5, and system scanner 4.25. We are planning to install one or more NIDS and/or HIDS in several regions troughout our company. As such, we want any events reported in one region to be routed to the local NOC in that region to monitor those events as well as sending the events to a main console that is centrally located to our security staff. We would like to set up an Event Collector in each region such that the sensors in the region will report to the local EventCollector and the EC would report the events to a common Enterprise database, as well as consoles located both centrally and in the region.
Is it possible in Site protector 1.0 to have one console connected to multiple Event Collectors and EventCollectors reporting to multiple consoles?
Could you please suggest us the possible solution we can have to achieve this.
Thanks,
Durai
**************************************************************************
This email (including any attachments) is intended for the sole use of the intended recipient/s and may contain material that is CONFIDENTIAL AND PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or distribution or forwarding of any or all of the contents in this message is STRICTLY PROHIBITED. If you are not the intended recipient, please contact the sender by email and delete all copies; your cooperation in this regard is appreciated.
**************************************************************************
