@@ -702,6 +702,16 @@ Such measures are typically subject for an enterprise use case.
## 4.4 Distribution of Security Functions
The NMS provides the reliable availability of a network's operation, keeps control of its managed NEs, provides traffic meta data and metrics for the monitoring and verification of the correct network operation.
The NMS can also act in cooperation with other defense systems in mitigating or repelling attacks and incidents on its managed NEs.
An inconclusive example would be a managed NE that reports to the monitoring system the current performance of network traffic throughput with related information about time, source, destination, and signalizes an alert in cases of overload or failure.
In best cases, continuous monitoring data can allow intelligent analysis systems to forecast network issues and take action to resolve or at least mitigate those before those come to reality.
Therefore, what security functions are considered to be ancillary functions, and what are considered to be part of the core product, and what 3rd. party products depend on how the product is defined.
A distributed service can in theory always be replaced, when the API design is stable, documented, and the authorisation of external components is done adequately.
Therefore, the security functions listed below, do not necessarily fit under a single categorisation.
An NMS can be formed by a compilation or collaboration of different subsystems in a local distance but within the same management network and within the equal operational environment.
The security functions may be implemented inside one or more of the subsystems that form the NMS.
The product software packages can be installed, updated, and managed using an OS package manager or other similar mechanism outside of the control of the product.
