ActiveScout Components

ActiveScout is available in two system configurations. The Site solution protects networks with a single point of connectivity to the Internet and the Enterprise solution protects networks with multiple points of Internet connectivity.

The ActiveScout Site solution consists of the ActiveScout appliance and Site Manager, while the ActiveScout Enterprise solution consists of multiple ActiveScout appliances, the Management Server, and the Enterprise Manager.

ActiveScout Appliance
The Scout is located outside the perimeter firewall and monitors traffic coming from the Internet for pre-attack reconnaissance activity. Because the ActiveScout appliance does not sit in-line, there is zero latency and zero point of failure. ActiveScout also monitors legitimate traffic to the Internet in order to map the protected network and its services. The Scout then accurately identifies attackers and optionally blocks them.

Management Server
The Management Server is an aggregation device that communicates with multiple ActiveScout appliances distributed across the enterprise. It manages the activity and policy of deployed appliances, and collects threat information such as attempts, identification, and prevention. This information is available for display and reporting by the Enterprise Manager. The Management Server can also receive threat alerts from an appliance and distribute it to all of the Enterprise's Scouts, creating an effective, uniform layer of security at all of the network's entry points.

Site Manager & Enterprise Manager
The Site Manager and Enterprise Manager are Java-based applications that provide comprehensive management of one to many ActiveScout appliances. Both Managers also provide a visual overview of the Scout's threat prevention activity, including a geographical representation of the location of potential and actual attackers, their IP addresses, their activities, and the preventive steps that were taken against them.