H3C SecCenter CSAP-iSOC-H3C

WelcomeuserNew H3C 退出

1. Have an accountLogin
2. Create an accountRegister

English

Home

Products and Solutions

Security

Products

Security Management

iSOC

H3C SecCenter CSAP-iSOC

Datasheet Download

H3C SecCenter CSAP-iSOC (hereinafter referred to as the iSOC) is a comprehensive system designed to perceive network security risks and threats and deal with the increasingly severe security situations in the network, such as attacks on networks and service systems, virus explosions, and large-scale user information leakage.

The iSOC is developed based on security big data technologies, and it improves the network capability in threat recognition, comprehension, analysis, and response from a global perspective. This platform collects, analyzes, evaluates, and demonstrates the elements and events that can affect the network security situations as well as predicts the security situation trends in the network. With the help of machine learning and artificial intelligence (AI), this platform possesses the closed-loop decision-making ability of the brain of security and implements diverse security strategies into practice by intelligently analyzing security data on the iSOC and coordinating with and responding to other components in the network. Overall, this platform can detect security risks and threats, predict the future security trends of the network, coordinate with other components to protect the network, and evolve intelligently as new security risks and threats emerge.

The iSOC provides a full set of security risk solutions from monitoring, analytics, response, to prediction. It conducts in-depth analysis of massive logs with threat intelligence and machine learning technologies, correlates network attack events and presents the security risk status of the entire network visually from multiple dimensions, thus achieving a closed-loop approach to security from risk alerts to security associations. Overall, using this platform can greatly reduce the security maintenance cost and improve security threats detection and processing capabilities for enterprises.

H3C SecCenter CSAP-iSOC

Learn More

The following contents are complex, and it is recommended to browse on PC.

Enter c.h3c.com.cn on the PC browser and operate according to the page to synchronize to the PC and continue browsing.

Continue by mobile

Features

Diverse Data Collection

Supports collecting logs from various network devices, security devices, hosts, and applications.

Collects massive logs of different types and formats from a wide range of devices including networking devices and databases through multiple approaches such as FTP (proactive collection), syslog and HTTP/HTTPS (passive collection), and agent deployment.

Supports storing massive logs in a centralized manner and supports full lifecycle management of the logs.

Standardizes the log format and classifies the logs in order to adapt logs from devices of other vendors.

Multi-Dimensional Risk Warning

Structures the data pieces (including threat alarms, abnormal behavior alarms, and asset management data), and then presents these data in higher-dimensional views by using visualization technologies.

Detects intrusion events in real time based on whole-network threat reports and big data analysis, and provides rich data visualization effects, including 3D charts, radar charts, topologies, and heat maps.

Presents security risks and threats from various perspectives and dimensions based on the security big data, so as to implement real-time monitoring and alarming for security events.

Cooperates with vulnerability scanning devices to provide network-wide vulnerability management.

Traceability

Traces the attack source from multiple dimensions to visualize the complete attack chain.

Tracks and investigates security events and proactively captures related packets to gain complete visibility into attacks.

Traces address translation relations based on IPs and time ranges in NAT application scenarios, to help resolve related security events.

Quickly traces and defines unknown threats based on the abundant real-time threat intelligence from the cloud and local network behavior, terminal behavior, and file information that covers the attack source, method, target, and scope.

Automated Orchestration and Response

Supports customizing the security response playbooks to address security events, and adjusting the resolution procedure to meet protection needs.

Provides a wide variety of actions in response to security events, including denylist, access control, alarming, ticket handling, user logoff, virus killing, and isolation of hosts.

Orchestrates not only security devices such as FW, IPS, WAF, and ACG, but also network devices such as switches, routers, and APs.

Standardize the incident response process and enhances safety management to a new level.

Specification

The iSOC performs massive data mining and association analysis based on the whole-network security event data it collects and the threat intelligence it receives from the cloud. Based on the data mining and analysis, The iSOC provides panoramic views to demonstrate the attack situation, threat situation, and operation and maintenance situation. So, users can know about the current security situations quickly and take actions accordingly, thus achieving a close-loop approach to security.

Item	Specifications
Security Situation Demonstration	Threat situation: Supports displaying global, domestic, and regional threat landscapes. External attack situation: Supports real-time monitoring of external attacks on internal assets. Asset situation: Supports comprehensive asset inventory with related situational analysis.
Association Rule	Realtime data association analysis: applies association rules to logs in order to recognize security events within a period of time and generate related alarms in real time. Support for user-defined association rules.
Threat Alarming	Alerts users through an SMS message or email upon an attack.
Log Audit	Audits varieties of received logs.
Asset Management	O&M on assets and asset groups. Supported assets include hosts, network devices, middleware, databases, and application systems. Supports adding, importing, and automatic discovery of assets.
Security Orchestration And Response	Security orchestration. Automatic deployment and execution of response actions.
Report	Supports daily, weekly, monthly, and custom period reports. Supports report export based on area, asset, resource event type and severity, or custom conditions.
Permission Management	Role-based privilege separation and access control Local authentication and remote authentication of users.
System Management	System status monitoring, including service node monitoring and service process status monitoring. System log and operation log management.

Ordering Information

This section lists the available components and licenses for the H3C SecCenter CSAP-iSOC, and provides the ordering recommendations. The information is subject to change over time. For the most up-to-date information, consult your H3C sales representative.

License

Component	Remarks
H3C SecCenter CSAP-iSOC Threat Discovery and Security Operations Platform Bundle	Required.
H3C SecCenter CSAP-iSOC Threat Discovery and Security Operations Platform, Threat Intelligence Update License, 1 Year	Required.
H3C SecCenter CSAP-iSOC Threat Discovery and Security Operations Platform, Platform Software Update License, 1 Year	Required.

Server Hardware Accessories

Software installation recommended resource requirements:

Hardware Accessory	Minimum Hardware Server Resource Requirements	Minimum VM Resource Requirements
CPU	24 cores	32 cores
Memory	128GB	128GB
Disks	2 × 960GB SSD system disks + 3 × 4TB storage disks	12 TB

It is recommended to use the H3C X3040 Security Integrated Appliance:

PID	Description	Qty
PID	Description	Qty
H3C SecCenter X3040	H3C SecCenter X3040	1
NA-SSD-960G-SATA-SFF-1	960GB 6G SATA 2.5in RI 5400PRO SSD Module	1
NA-HDD-4T-SATA-LFF	4TB 6G SATA 7.2K 3.5in EV 512e HDD Module	3
NS-DDR5-5600B-32G-2RX8-R-HG-M	32GB 2Rx8 DDR5-5600B RDIMM Memory Module	2

Resources

Resource Center

Technical Documents

Software Download

H3C SecCenter CSAP-iSOC

Diverse Data Collection

Multi-Dimensional Risk Warning

Traceability

Automated Orchestration and Response

License

Server Hardware Accessories

Resource Center

Related Links

Cloud & AI

Intelligent Connection

Intelligent Computing

Intelligent Storage

Security

SMB Products

Intelligent Terminal Products

Industry Solutions

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Technical Blogs

Training & Certification

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Partner Business Management

Service Business

Profile

News & Events

Online Exhibition Center

Contact Us