Symantec 10521146 Administration Guide - Page 34

34 Architecture About management and detection architecture ■ RestrictedUsers: A user authenticated with partial read-only capabilities. This user is allowed to view most information in the Network Security Console with the exception of some advanced information and network-sensitive data. About the node architecture The Network Security software node or 7100 Series appliance node contains a variety of tools and techniques that work together to gather attack information, analyze the attacks, and initiate responses appropriate to specific attack circumstances. The following diagram illustrates how Symantec Network Security's arsenal of tools work together to provide protection: Figure 2-2 Core architecture of a software or appliance node Alert Manager Sensor Manager Admin Service (QSP Proxy) Analysis Databases Event Stream Provider Sensor Process Smart Agent Receiver FlowChaser The components of the core node architecture apply to both Network Security software nodes and 7100 Series appliance nodes as follows: ■ About the alert manager ■ About the sensor manager ■ About the administration service ■ About analysis ■ About the databases ■ About Event Stream Provider