McAfee QUICKCLEAN 1.0 Manual de usuario descargar pdf (Pagina 10)

• Brokers — Installed on managed systems and communicate messages between Threat

Intelligence Exchange modules. The network of brokers tracks active consumers and dynamically

adjusts the message routing as needed. Brokers can be organized into hubs.

• Hubs — Contain one or two brokers that are associated with a specific location. Hubs provide

failover protection in a multi-broker environment. If a hub has two brokers, both act

simultaneously. If one is unavailable, the other continues to function.

•

Consumers — Modules, such as the Threat Intelligence Exchange module for VirusScan

Enterprise, that receive and process messages from the brokers.

• Service zones — A service zone is associated with brokers and hubs and is used to route Threat

Intelligence Exchange requests. In the following example, the highlighted boxes show the service

zones defined. When the module sends a reputation request, it attempts to find a Threat

Intelligence Exchange server in the Portland service zone first. If a server is not available in that

zone, it looks in the North America service zone, because the Portland hub is part of the North

America zone. Without specifying service zones, requests are sent in round-robin order and could

be sent to the Europe or London hub first.

• Data Exchange Layer client software — Manages brokers, hubs, and service zones.

After installing the DXL brokers and client software, you create the hubs and zones for the brokers in

your environment. This step is necessary only if you have several Threat Intelligence Exchange servers

and DXL brokers.

Overview

Threat Intelligence Exchange components

McAfee Threat Intelligence Exchange 1.0.0 Product Guide

1 2 ... 5 6 7 8 9 10 11 12 13 14 15 ... 28 29

Sin comentarios

McAfee QUICKCLEAN 1.0 Manual de usuario Pagina 10