Symantec 10521146 Administration Guide - Page 61

Getting started 61 Deploying single nodes features such as the ability to block specified traffic from entering the network. ■ Passive deployment: Both software and appliance nodes can be deployed in passive mode, and positioned near the network, where they do not impede network performance as a point of failure. No service is ever lost, even if the node fails. The possibility of failure can be mitigated by failover groups that maintain the availability of all nodes. See "Establishing high availability failover" on page 287. Deploying single nodes Symantec Network Security can be deployed as one or more single nodes that operate independently of each other within your network. The following figure illustrates the relationship between a single Network Security software node or 7100 Series appliance node, a fictitious network, and a possible intruder: Figure 3-1 Fictitious Network Map with Intruder Internet Router Network Security console Software Host 1 or appliance node Host 2 Host 3 Host 4 Attacker Deploying a single Network Security software node Symantec Network Security can be deployed using one or more single Network Security software nodes. Each node functions independently as the master node in a cluster of one.