User guide

Managing with SiteProtector
61
Proventia Network IPS G and GX Appliance User Guide
When the Agent Manager receives the heartbeat, it places the appliance in the group you
specified when you set up registration. If you did not specify a group, it places the
appliance in the default group “G-Series” or “Network IPS,” depending on your version
of SiteProtector. If you clear the group box when you register the appliance, it places the
appliance in Ungrouped Assets.
Local settings or
policy settings
If you opted to allow local appliance settings to override group settings, then the
appliance maintains its local settings at the first heartbeat. If you did not allow local
appliance settings to override group settings, then the Agent Manager immediately
“pushes” the group's policy files to the appliance, even if the group's policy settings are
undefined. For example, if you set firewall rules on the appliance and then you register
the appliance with a group that has no firewall rules defined, the group policy overwrites
the local policy, and the appliance no longer has firewall rules enabled.
At the second heartbeat and each heartbeat thereafter, the Agent Manager “pushes” the
group policy to the appliance. However, you can change some local appliance settings
through SiteProtector. Any local policy settings you change for the appliance take
precedence over the group policy settings for that appliance only; the group policy
settings remain in effect for all other appliances in the group.
How appliance
updates work with
SiteProtector
After you register the appliance with SiteProtector, you must continue to update it
regularly to maximize performance and to ensure it runs the most up-to-date firmware,
security content, and database. Consider scheduling automatic database updates, security
content updates, and firmware update downloads and installations.
Note: You can download and install firmware updates in Proventia Manager even if the
appliance is registered with SiteProtector.
Use the Update Settings page to schedule the following automatic update options:
● downloading and installing firmware updates
● downloading and installing security content updates
● updating the database
How appliance
events are handled
in SiteProtector
You can specify the events that generate and deliver an alert to SiteProtector. When an
event occurs, the appliance sends an alert to SiteProtector. You can use the event
information in the alert to create valuable reports. The alerts sent to SiteProtector still
appear in the Alerts page in Proventia Manager if the alerts are configured for logging.
SiteProtector
management
options
When you register the appliance with a SiteProtector group, you can do the following:
● Allow the appliance to inherit sensor group settings
● Manage some or all of settings for a single appliance in the group independently in
SiteProtector, so that the appliance maintains those individual settings regardless of
group settings