Enterasys NetSight® Automated Security Manager
Security Incident Automated Response Management
NMS Automated Security Manager is a unique threat response solution that translates security intelligence into security enforcement. It interoperates with the Enterasys Intrusion Prevention System (IPS) and third-party network security appliances to automate responses to security incidents, remediating threats in real-time. It ensures that corporate data is protected, secure, and available.
ASM executes policy-based rules, and when triggered, maps IP addresses to ports and takes assigned actions. The range of possible response actions is broad and configurable, including quarantining the user, disabling the switch port, or rate-limiting the traffic flow. Taking the action does not disrupt other users.
Combined with NMS Policy Manager and IPS, ASM provides sophisticated identification and management of threats and vulnerabilities. For example, when notified by the IPS, ASM can determine the exact source location of a threat, determine a response based on the security policy, and trigger the configured action on the network switch.