1.3 Understanding Change Guardian Components

Change Guardian includes a number of software components that you should plan to install strategically over a number of computers. The following diagram displays the architecture:

Change Guardian includes the following major components:

Change Guardian Policy Editor

A Windows-based console through which you create and deploy policies to monitor critical files, systems, and applications in your enterprise.

Change Guardian Server

A Linux-based computer that stores your policies and change events.

Change Guardian Main

A web console that allows you to monitor security event details that pinpoint the who, what, when, where, and authorization status of a change or activity, including before and after details of the change.

Agent Manager

A web console that provides a central location from where you can manage your agents, organize your assets in groups, and remotely install and update agents on assets. It helps you maintain your environment by keeping track of agents that are not communicating and allows you to either fix the agent or remove it from your environment.

Agents

Platform-specific software on Windows and UNIX computers that allows you to forward events to the Change Guardian server based on policies you have deployed. Opening ports on agent computers is not necessary unless you want the ability to browse the computer for files, processes, and users when you create policies.