Note: If you are seeking an iSeries Network Security solution for access control, Go here > BSafe/Global Security Suite for iSeries (AS400)
 OS400 does a superb job of logging the security events that occur on your system, but its impossible to monitor and analyze the tons and tons of raw data to effectively implement a security solution with OS400 alone. There is No Filter Support, No Real-Time Monitoring, No Alerting and OS400 Auditing cannot be linked to any (re)-Actions to enforce your Security Policy.
The iSeries Security Agent agent provides a complete and simple to implement security solution which will effectively allow you to solve all your OS400 security issues, and it is very affordable...
Visual Message Center's Security Agent has been designed specifically for addressing the security concerns of an iSeries environment and can alert you about any event that is suspicious, malfunctioning, causing a security breach or that has trespassed a business rule you have specified, allowing you to effectively:
* Take automated iSeries Security actions to self-protect your system from damage
* Alert you in real-time to any weakness of system intrusion
* Protect your iSeries from disclosing information to unauthorized people
* Restrict iSeries user access to confidential information
* Protect your iSeries from curious system users and outsiders
* Protect your iSeries from unauthorized changes to data
* Restrict manipulation of data to authorized programs on the iSeries
* Provide assurance that data on the iSeries is trustworthy
* Prevent accidental changes or destruction of data on the iSeries
* Protect your iSeries against attempts by an outsider to abuse or destroy system resources
The iSeries Security Agent simplifies the process of configuring system auditing rules (either system wide or by user), in which smart console of Visual Message Center will then manage the security-relevant audit messages. The enriched messages can be used to send immediate alerts, take automated actions, audit system security and analyze possible weaknesses.
Visual Message Centers - iSeries Security Suite utilizes the OS400's auditing mechanisms to provide you with real-time and historical system auditing. The iSeires Security Suite transparently audits all your iSeries users, and looks at the problem within the context of the situtation rather than looking at separate events. In essence, it determine which business area's could possibly be affected and alerts you in real-time and/or allows your system to take precautionary actions by running commands to protect itself before damage is done. By automating actions, you can close down security holes immediately, around the clock, without operator intervention.
For example, you can protect against changes to key system values, e.g. if the system security level is unexpectedly changed from 50 to 30, the iSeries Security Agent can automatically: change the security level back to 50; end the job that made the change; disable the user profile that was used; send an alert describing what occurred?.all done in seconds.
The advanced filters allow you to fine-tune the iSeries Security Agent to pinpoint real security issues, rather than everyday user mistakes. For example, when isolated events received in a short space of same time - a failed sign-on attempt, rejected object or spool file access. Those things can happen all the time on your system. But the iSeries Security Suite's SmartConsole will notice that they all came from the same user profile, or from the same device, or the same IP address?and warn you, or take action if necessary in real-time.
The Computer Security Institute and FBI computer crimes and security survey for 2003 states that 80% of all serious security violations are performed by a company's own employees or partners. Many company's have a firewall type solution in place, but these solutions do not address the security requirements/issues of an iSeries environment. Although firewalls and other related technologies have their own valualbe capabilities; which only control the entrance to your system, like a country's "customs control", the Security Agent is your internal "police" force, monitoring the activities of users inside your system.
The iSeries Security Agent also provides auditing reports that identify weaknesses and limitations, allowing you to continuously improve upon your security policy. It even reveals security holes caused by vendor packages, so you can demand modifications.
Note: A large part of Visual Message Center's Security Agent's functionality is integrated as part of the Visual Message Center's Security Solution for iSeries. Please see VISUAL Message Center's main page for additional information. .
Real-time security alerts - vital for any security project
Detect unauthorized attempts to access your company's information in real time
Program automated actions to react to events
Audit your security policy for weaknesses and limitations
Analyze attempted security violations
Plan migration to a higher security level
The iSeries Security Agent is vital for any iSeries system security project. It provides the monitoring and auditing capabilities that you need to protect your data. It will alert you to possible security threats in real-time, and even respond to security breaches by taking preventive action before damage is done.
The iSeries Security Agent guards your system day and night. You can make your security policy more aggressive and more proactive with the SmartConsole automated actions, closing down security holes immediately, around the clock, without operator intervention.
For example, you can protect against changes to key system values, e.g. if the system security level is unexpectedly changed from 50 to 30, the Security Agent can automatically: change the security level back to 50; end the job that made the change; disable the user profile that was used; send an alert describing what occurred?.all done in seconds.
The iSeries Security Agent also provides auditing reports that identify weaknesses and limitations, allowing continuous improvement of your security policy. It even reveals security holes caused by vendor packages, so you can demand modifications.
The advanced filter criteria allow you to fine-tune the iSeries Security Agent to pinpoint real security issues, rather than everyday user mistakes. For example, apparently isolated events may be received in a short space of same time - a failed sign-on attempt, rejected object or spool file access. Those things can happen all the time on your system. But the SmartConsole will notice that they all came from the same user profile, or from the same device, or the same IP address?and warn you, or take action.
Unlike other dedicated security solutions on the market, the VISUAL Message Center product also manages your AS400 Messaging, Windows Event Logs, TCP/IP services and many other Servers, Devices, and Services. The iSeries Security Agent configures system auditing rules, and then manages security-relevant audit messages using powerful filters. The enriched messages can be used to send immediate alerts, take automated actions, audit system security and analyze possible weaknesses. Filters simplify event detection and customization by allowing you to identify particular objects, user profiles, commands. There is support for generic, wildcard, date and time, text string, and through extensive logical functions. There are 4 critical auditing features necessary to evaluate your security efforts and policies to identify weaknesses and potential security concerns system-wide or by user: Object Auditing - Monitors changes and access to objects (e.g. delete, copy, rename, restore, authority change, read, edit, etc.), and tracks unauthorized events.
Command Auditing - Monitors any command line entries (e.g. commands run by suspect user profiles, sensitive commands, etc.)
System Configuration Auditing - Tracks changes in system configuration, including changes to system auditing, creation and modification of user profiles, system value changes (e.g. security level, IPL info, date, time, etc.) and use of Dedicated Service Tools.
Action Auditing - Monitors Authority failures (e.g. persistent failed sign-on attempts, object access denied, etc.) programs changed to adopt authority, users obtaining adopted authority, profile swapping, etc
These auditing features will ensure that your security policy is protecting your company's resources
In conjunction with Visual Message Center, the iSeries Security Agent provides a effective real-time security solution for any iSeries environment which will also effectively allow you to react or evaluate the success of your security policy in place, and allow you to easily address any new security issues very fast. In addition, your IT staff will be able to efficiently detect potential problems in hardware, middleware, and applications, so they can easily correlate with their real business impact using a customizable business view of your IT environment.
[PDF SPEC SHEET] |
