Overview19novdocx (en) 17 September 20091OverviewAdding Novell SentinelTM to your Identity Manager solution provides a reporting services. Byadding reporting, you can demonstrate that the business policies are enforced within your IdentityManager solution. This is the last component to add to your Identity Manager solution.1.1 Sentinel Integrated ArchitectureSentinel is a security information management and compliance monitoring solution that monitors,responds to, and reports on security and compliance events. Sentinel easily integrates with NovellIdentity Manager so you get automated, real-time security management and compliance monitoringacross all systems and networks. The Sentinel-Identity Manager framework provides automaticdocumenting and reporting of security, systems, and access events across the enterprise; built-inincident management and remediation; and the ability to demonstrate and monitor compliance withinternal policies and government regulations.The following diagram illustrates the Identity Manager logging and reporting architecture whenintegrated with Sentinel.Figure 1-1 Identity Manager and Sentinel Integrated Architecture1. An Identity Manager event occurs and it is sent to the Platform Agent. To capture all IdentityManager events, the Platform Agent must be installed and configured on each Identity Managerserver.CollectorCollectorSentinelControl CenterIdentityManagerPlatformAgentEventsCacheWhen disconnectedfrom the EventSource ServerWhen reconnectedto the EventSource ServerCrystalReportsData StorePort 289 AuditQueueEvent Source ServerPort 9099NovellAuditConnectorIdentityManagerCollectorCollectorManager