Each Avaya SBC provides complete network security monitoring and management capabilities. These capabilities encompass each aspect of the UC network, including all endpoints, media gateways, call servers, voice mail (VM) and applications servers. In addition, the monitoring and management capabilities provide a cascaded, multi-layered detection, mitigation, and reporting system that provides real-time information based on user-definable event thresholds. This system supports a detailed graphical user interface (GUI) called the EMS web interface. The EMS can be installed on and run from any Avaya SBC security device. The EMS can also be installed on a separate server platform and used as a standalone Element Management System (EMS). This EMS monitors and coordinates the security activities of all Avaya SBC security devices installed in a network.