H3C SecCenter SMP
- H3C SecCenter SMP
The Security Management Platform (SMP) is a platform that allows you to manage network security services. SMP is applicable to networks of all sizes. It provides centralized management of key security devices (such as firewalls and IPS devices) through the following features: real-time event monitoring, security policy deployment, threat log audit, and comprehensive statistics and analysis on security events on the whole network.
Unified security policy management.
Unified device performance monitoring.
Unified security signature upgrading.
After you synchronize security devices to the SMP global resources, you can perform the following operations:
Add, edit, or delete security policies.
View, synchronize, upgrade, or roll back the IPS, AV, or ARP signature libraries of the devices.
Upload, push, delete, or search for signature files.
Manage the file push tasks, and view the task state and running result.
View statistics on the managed devices, including the CPU usage, memory usage, system traffic statistics, interface traffic statistics, system concurrent sessions, and system new sessions.
Log audit and alarming
IPS/FW security event logging; log searching by multiple conditions.
IPS/FW security event logs in standard format; log information displaying by start and end time, source and destination IPs, source port, source and destination security zones, log source device name, security actions, protocol, and event severity.
Customized log aggregation for security event alarming.
SMP collects logs from devices. Based on the logs, SMP visually displays a security event's source, destination, and other details, so that administrators can know about attacks and abnormal traffic on the network. SMP also records user operations for audit and trace purposes. SMP provides powerful search. It can quickly find matching data in massive historical data from multiple dimensions, such as device, time, event severity, protocol, security action, and source/destination IP.
Predefined report templates.
Customized report tasks. You can define the report task type and execution time.
SMP has predefined five report templates. They are IPS block event, IPS attack event, IPS attack destination port, IPS attack source IP, and IPS attack destination IP. SMP supports you to customize reports based on the time, report template, and objects.
Displays device performances and security events; Displays Top items in different time spans.
Collects and classifies IPS/FW threat logs; supports log searching by multiple conditions; displays log details; supports log exporting.
Generates alarm events according to the alarm rules; supports popup display for an alarm event; supports acknowledging and bulk acknowledging alarm events.
Supports management of areas, assets, security policies, and signature libraries.
Provides system management features, including data cleaning, system parameter configuration, roles and privileges management, and logo customization.
H3C SecCenter SMP
H3C SecCenter SMP Hierarchy Authorization
Required for hierarchical management.
H3C SecCenter SMP IPS Authorization
By default, FW management is available and IPS management requires authorization.
H3C SecCenter SMP-1 License
For management of one device.