F/S: IT Audit Data Warehouse

The CPA can serve as a data warehouse for database events, system events, network events and other event types coming from any Platform or Database, and can serve as middleware to integrate with corporate SYSLOG and SIEM tools. BSafe/Cross-Platform Audit serves as a central data warehouse for historical auditing, reporting, alerts and general IT security policy management and compliance. Security data, database and system event logs managed by the CPA are stored in a SQL Server. BSafe's CPQ provides simple point-and-click tools for non-technical personnel to perform their tasks on platforms they are not familiar with.

Enforcive/Cross-Platform Audit works with the following platforms: IBM i (AS400), IBM z (Mainframe), Windows, SQL Server, Unix/AIX, Linux, Oracle and Sun Solaris

A large selection of compliance drive audit reports are pre-defined and ready to run. After system and security audit data is imported to the CPA's central data repository (SQL Database), it can filter events for on screen viewing and generate reports accross systems, partitions and platforms by user or global user ID using many filter and selection criteria. Once in the CPA Sequel database, alerts can be triggered to send an email notifications

BSafe's Cross-Platform Audit (CPA) collects, consolidates, organizes and manages all your IT system, database and security (desired/relevant) events from any platform for long term archiving and/or integrating with other corporate frameworks such as SYSLOG and SIEM products. Immediate benefits include:

Saves resources in platform-specific expertise that would otherwise be required to achieve the same result.
Enables non-technical personnel to perform thier audit related tasks without having to rely on other resources.
Frees up production resources from excessively large event and security logs that often need to be maintained online for a significant period of time and/or allows for additional security auditing to be enabled.
Correlates events from multiple systems into a single audit trail, making analysis more efficient and obviuos.
Provides a single centalized view of all relevant events that affect your security policies or compliance initiatives.
Identifies database field level changes, highlighting the before and after results.

Event Sources Supported by Platform, OS or Database are summarized below:

Windows/Servers (Windows Server 2000/2003/2008)

• Windows Event Logs: Security, Application, DNS, and more
• Windows Active Directory Compliance
• ISA Server logs
• DHCP logs
• IIS Web Server logs
• IBM Lotus Domino

SQL Server (2005/2008)

• SQL Statements
• SQL System Audit
• SQL Data Audit

SQL Server (2000)

• SQL Data Audit

AS/400/i Series/System i (V5R1M0 and above)

• System Audit
• File and Field Audit
• Alerts
• Application Audit
• SQL Statement
• IP Filter
• Compliance
• Message Queue
• History Log

Mainframe/System z (z/OS v 1.9 and above)

• SMF TELNET
• SMF FTP
• SMF VSAM

RACF (according to operating system)

• SMF RACF

Communication Server TCP/IP (according to operating system)

• TCP/IP Application Audit (FTP and Telnet)

DB2 (v8, v9 and above)

• SMF DB2
• DB2 Log Records

CICS TS (v3.2 and above)

• SAFE/CICS

AIX/System p (IBM AIX 5.3 or higher)

• System Audit
• UNIX DB2

SYSLOG Source (Any SYSLOG sender)

• Routers
• Firewalls
• Antivirus
• Any other SYSLOG sender

Oracle Server (V10 and up)

• SQL Statements
• Oracle System
• Oracle Admin
• Oracle Profiles/Users
• Oracle Procedures
• Data Audit

Linux/System x (all distributions, including Red Hat, CentOS - Kernel version 2.6 or higher)

• System Audit X86
• System Audit 86_64
• System Audit IA64
• System Audit PPC64
• System Audit PPC
• System Audit S390X
• System Audit S390

SAP Application (SAP Business One, SAP Netweaver)

• SAP Application Audit

IT Audit Data Warehouse - CPA