1.0 Understanding Command Center for ESM

Micro Focus provides a platform that enables you to deploy a combination of security, user, and entity solutions into a single Container Deployment Foundation (CDF) environment. The platform’s browser-based interface gives users fast access to the ArcSight suite of products that you have deployed. A common layer called Fusion provides the core services for this CDF environment, including the Dashboard, user management, and single sign-on configuration. The Dashboard enables users to visualize, identify, and analyze potential threats by incorporating intelligence from the multiple layers of security sources that might be installed in your security environment, such as:

  • Real-time event monitoring and correlation with data from ArcSight Enterprise Security Manager (ESM)

  • Analyzing end-user behavior with ArcSight Interset

  • Performing deep-dive investigations with ArcSight Recon

Deploying ArcSight Command Center for ESM (ESM for Fusion) in this platform incorporates the dashboards and some functions of the ArcSight Command Center console. Users will be able to run and review searches, reports, and case management, as well as perform administrative functions for managing active channels, content, connectors, storage, archives, search filters, saved searches, peer configuration, and system logs. For the Dashboard, ESM for Fusion adds several widgets that display data from your ESM sources. If you also deploy the Layered Analytics capability, widgets such as the Active Lists widget can incorporate data from both ESM and Interset for greater insights. If you want to create widgets specific for your organization, you can build them in the Widget SDK.

NOTE:The Command Center console deployed with ESM for Fusion is separate from the Command Center console that you might have installed with previous versions of ESM.

ESM for Fusion scales to match the footprint of your environment. You can install ESM for Fusion on the same server as ESM, if there are enough spare resources on the server, or install on multiple servers.

For information about using this product, see the Help embedded in the product or posted with the documentation for Fusion.