HP ProCurve Threat Management Solution Implementation Guide 2009-05

4-80
HP ProCurve Network Immunity Manager with HP ProCurve Security Devices
Step 3: Respond to Threats
Figure 4-57. PCM+ Global: Policy Management Window
4. Click OK.
Optional Task: Consider Interaction with IDM
If you are running IDM, IDM automatically interacts with NIM. The benefits of integrating NIM
and IDM include:
■ Better threat protection—NIM’s actions continue to apply to a user even when the user
attempts to connect to a different switch port or wireless access point (AP).
■ Better visibility into who is generating threats:
• You can view an offender’s username in NIM tables, lists of security events, and reports.
• You can view a user in IDM and see all of the actions applied to this user.
■ Easier setup—You can use the same times and locations for both IDM’s policies and NIM’s
policies.
You can prevent NIM from sending mitigation actions to IDM so that those actions are not
continually enforced when offenders move to another port or AP. To disable this part of the
NIM-IDM integration, complete the following steps:
1. In PCM+, click Tools > Preferences.
2. Click Network Immunity Manager in the navigation bar of the Preferences window.
3. Clear the Enable IDM integration check box.
4. Click OK.