Symantec 10521146 Administration Guide - Page 33

Architecture 33 About management and detection architecture protection policies, and view log data. You can generate reports and view them immediately in the Network Security console, or you can schedule them to generate automatically. The Network Security console contains three main tabs that provide a view of the Devices tab, Incidents tab, and Policies tab. ■ Devices tab: Provides a hierarchical tree view of the network topology, with a detailed summary of each device. ■ Incidents tab: Provides detailed descriptions of incidents and events taking place in the monitored network, and can be drilled down to reveal detailed packet information. ■ Policies tab: Provides the tools to create, manage, and apply user-defined signatures, signature variables, and protection policies. Reporting in the Network Security console includes dynamic chart and graph generation, with information drill-down and data retrieval. Pre-defined reports can be saved and printed. Users can send flow queries and play back traffic sequences from the Network Security console as well. About role-based administration The Network Security console provides a simple yet powerful interface that is useful for all levels of administration, from the Network Operation Center (NOC) operator who watches for a red light, to the skilled security administrator who examines and analyzes packets. Four pre-defined user groups provide efficient management. Each group includes a set of permissions for specific management operations. Each user's login identity indicates their role and permission assignment during an administrative session. Symantec Network Security automatically installs a SuperUser login account that is authenticated with full administrative capabilities. The SuperUser can create additional login accounts in the following user groups: ■ SuperUsers: A user authenticated with full administrative capabilities. This user is allowed to perform all administrative tasks that the Network Security console can execute. ■ Administrators: A user authenticated with partial administrative capabilities. This user is allowed to perform most administrative tasks, with the exception of some advanced actions. ■ StandardUsers: A user authenticated with full read-only capabilities. This user is allowed to view all information in the Network Security console.