Secure Domain Manager (SDM)

This section contains information about the following topics: 
casp1032
This section contains information about the following topics: 
CA Spectrum Secure Domain Manager
Secure Domain Manager is a 
CA Spectrum
 network management solution that allows users to manage devices in secure networks. You can manage devices without deploying a local SpectroSERVER. Secure Domain Manager lets you manage your secure domains by securely tunneling SNMP and ICMP traffic through a secure connection. Only a single port is opened on the firewall, which allows the extended manageability without impacting security policies in place. This solution is transparent to end users and client applications, eliminating the need to perform more administrative tasks.
Challenges to Managing Highly Secure Networks
Data networks are more secure than ever nowadays. The challenges that are involved in managing devices and applications in secure networks are correspondingly greater. These challenges include:
  • Managing network elements in overlapping (or private) IP domains (NAT environments)
  • Managing network elements behind firewalls that are configured to block SNMP and ICMP traffic
  • Managing network elements across insecure network domains
The Secure Domain Manager product provides a unique solution to these management challenges.
Benefits of Secure Domain Manager
The Secure Domain Manager solution enhances the existing management capabilities included with 
CA Spectrum
 in the following ways:
  • Lets 
    CA Spectrum
     communicate with all SNMP-compliant devices: SNMPv1, SNMPv2, and SNMPv3.
  • Lets 
    CA Spectrum
     communicate with devices located behind firewalls that block SNMP and ICMP traffic.
  • Simplifies firewall configuration. A single "hole" is opened for traffic passing between two well-known hosts on a well-known port.
  • Lets 
    CA Spectrum
     pass SNMP and ICMP traffic securely through insecure networks.
  • Lets 
    CA Spectrum
     manage devices in overlapping IP domains (NAT environments) using a single 
    SpectroSERVER
    .
  • Provides enhanced Discovery capabilities to discover and model devices in secure environments, one IP address space at a time.