Symantec Event Collector for Internet Security Systems RealSecure (SEC-ISSRS) is an event collector for Symantec Enterprise Security Architecture (SESA). A SESA event collector gathers, normalizes, and preprocesses event data from security-related products such as firewalls, intrusion detection systems, and antivirus scanners. The collector sends the restructured event data to a SESA Agent, which communicates directly with the SESA Manager. SEC-ISSRS enables centralized, cross-tier logging, alerting, and reporting between SESA and the ISS RealSecure Workgroup Manager. The SEC-ISSRS retrieves events generated by RealSecure agents and integrates these events into SESA. Currently, the events represent the operation of the RealSecure manager. These events are stored in the SESA DataStore and are available for the following: visual inspection, as the basis for alert notifications, incident creation and raw data for report generation. The Event Collector polls the RealSecure database for...