Symantec 10521146 Administration Guide - Page 25

2 Chapter Architecture This chapter includes the following topics: ■ About Symantec Network Security ■ About the core architecture ■ About management and detection architecture About Symantec Network Security This chapter describes the underlying architecture of both the Symantec Network Security core software and the Symantec Network Security 7100 Series appliances. It describes how the components work together to gather attack information, analyze behavior, and initiate effective responses. The Symantec Network Security software and the Symantec Network Security 7100 Series appliance employ a common core architecture that provides detection, analysis, storage, and response functionality. Most procedures in this section apply to both the 7100 Series appliance and the Symantec Network Security 4.0 software. The 7100 Series appliance also provides additional functionality that is unique to an appliance. Each section describes this additional functionality in detail. About the core architecture Symantec Network Security's challenges are to detect malicious or unauthorized behavior, to analyze the behavior, and to determine an appropriate response. Symantec Network Security provides a three-pronged approach to meet this challenge: detection, analysis, and response. The following diagram describes this basic approach: