HP ProCurve Threat Management Solution Implementation Guide 2009-05

2-2

HP ProCurve Network Immunity Manager Standalone Solution

Overview

This chapter outlines the activities that you might engage in to set up an HP ProCurve Threat

Management Solution that includes:

■ HP ProCurve Manager Plus (PCM+) 3.0

■ HP ProCurve Network Immunity Manager (NIM) 2.0

■ HP ProCurve Identity Driven Manager (IDM) 3.0 (optional)

■ HP ProCurve infrastructure devices such as:

• HP ProCurve 8200zl Series switches

• HP ProCurve 3500yl Series switches

This solution features a NIM standalone deployment, which uses the following:

■ NIM’s Network Behavioral Anomaly Detection (NBAD) capabilities to analyze traffic data

and detect malicious network activity

■ Infrastructure devices to send sFlow data, Virus Throttle™ events, and security-related

Simple Network Management Protocol (SNMP) traps to PCM+ and NIM

This deployment option does not include an intrusion detection system/intrusion prevention

system (IDS/IPS).

This chapter provides step-by-step instructions that are based on the phases defined in the

security management life cycle, as shown in 2-1. These activities also mirror the design steps

described in Chapter 4, “Design,” in the HP ProCurve Threat Management Solution Design

Guide. That is, if you are following the steps in the design guide, this chapter guides you through

the activities to complete these steps.