As shown in Figure 21-5, CSA has three basic components:
CSA endpoints: Endpoints are computing desktops, servers, laptops, and point of service (POS) terminals. The CSA agent is responsible for enforcing security policies received from the management server, sending events, and interacting with the user.
CSA management server: The server is the core component in the CSA deployment, a repository of configuration database. The server is responsible for deploying the security policies to the endpoints; it receives and stores all events, sends alerts to the administrator, and can deploy software to the endpoints.
CSA management console (CSA MC): The management console is an administrative web-based user interface and policy configuration tool that provides event views.
Note
The management server can also be used as the management console for policy configuration and event views.