Below are the new features included in the TMCM 6.0 SP2 release.
Alert / Event Notifications
- Eight (8) pre-canned alert rules help customers focus on notable detections
- Email alerts for proactively monitoring critical incidents
- Detection visibilities
- Advanced detection search with Ad-hoc Queries
Reports
- One (1) DDI summary report that consolidates data from multiple DDI dashboards
- Top affected hosts & most detected hosts to effectively handle at risk hosts
- DDI system status
Custom Defense
- Suspicious Object / Virtual Analyzer Feedback sharing within multiple DDI
- Web-based interface for 3rd party integration for blacklist sharing
- HP Tipping Point integration of Suspicious Object for network blocking
Performance / Scalability
Support 20G DDI traffic load with log volumes provided by the DDI team.