Event Receiver settings

The Event Receiver enables the collection of security events and network flow data from multi-vendor sources including firewalls, virtual private networks (VPNs), routers, Nitro IPS/IDS, NetFlow, sFlow, and others.

The Event Receiver allows for the collection of this data and normalizes it into a single manageable solution. This provides you with a single view across devices from multiple vendors, such as Cisco, Check Point, and Juniper, and allows event and flow data collection from Nitro IPS devices and routers that send data feeds to the Receiver.

High Availability Receivers (Receiver-HA) can be used in primary and secondary mode, acting as backups for each other. The secondary Receiver (B) monitors the primary Receiver (A) continuously and new configuration or policy information is sent to both devices. When Receiver B determines that Receiver A failed, it disconnects Receiver A's data source NIC from the network and takes over as the new primary. It remains as the primary until you intervene manually to restore Receiver A as primary.