HP Network Immunity Manager is a plug-in for PCM Plus that detects and automatically responds to internal network threats such as virus attacks. Additionally, it provides central management of HP Threat Management Services (TMS) zl Modules. It leverages security and traffic-monitoring features built into HP Networking switches such as sFlow, Virus Throttle, and remote mirroring technologies, as well as performs network behavior anomaly detection (NBAD) to detect attacks. Optionally, it remotely mirrors suspect traffic to an IDS/IPS/UTM appliance such as the HP TMS zl Module. This security tool provides visibility into internal network threat activity to help increase network availability.

Security

• Intrusion detection: Network visibility: monitors network traffic for threats using sFlow data. Detection methods: uses virus alerts, network behavior anomaly detection (NBAD), and security alerts. Remote monitoring: mirrors traffic to third-party IDS/IPS/UTM devices for deep packet inspection. Offender tracking: identifies the offender (IP, and MAC and DNS names) and displays their location. Security heat map: provides a real-time view of security activity across the network.