There isn't another AS400 Security solution that is as complete, simple to use and fast to implement on the market... BSafe iSeries Security can be implemented in as little as 1/10th the time in comparison to its competitors, allowing for a very fast ROI. The BSafe iSeries Security solution acts as an internal secure gateway, its network access controls all communication servers for the TCP/IP, SNA and Internet protocols. BSafe reveals iSeries network security vulnerabilities and enables you to: Monitor and Control WHO has access, HOW a user has access, WHAT libray's and objects users have access to, WHEN they can have access and much more - AND ALL WITH A CLICK OF A MOUSE!. BSafe's AS400 Security solution will enforce your iSeries Security policy in a few quick and safe steps, preventing unauthorized users from accessing your iSeries network, and ensure your native SNA and internet users respect your AS400 Security policies.
BSafe's iSeries Security solution is the only complete iSeries Security solution that is quick to deploy and intuitive enough for a non-iSeries Security user to use and implement. Its advanced technology masks the complexity of the AS400 Security implementation process and its completely integrated "point and click" AS400 Security management console makes the use of the BSafe iSeries Security quick to implement and simple to learn. BSafe designed specifically for the iSeries network and OS400 Security, to prevent penetration of your system from the internet or other networks and will furthermore ensure authorized users respect your security policy.
If AS400 Security compliance has you up at night, you need to evaluate BSafe's iSeries Security solution. BSafee provides over 70 predefined iSeries Security audit reports to help you pass your next internal and external AS400 auditing. Whether its your company's own AS400 Security policies or compling with government imposed security compliance regulations, such as; Sarbanes Oxley, PCI, Graham Leach Blilely, HIPAA, COSO, COBIT, ISO 9001, etc. BSafe's AS400 Security solution will make it very clear where your iSeries Security weaknesses are and provide you with the necessary security tools you need to Monitor and Control anyone on your iSeries network: WHO accesses your system, WHAT they have access too, HOW they have access, regardless of their connection (TCP/IP, SNA or Internet). BSafe resides on the AS400, providing a true native iSeries Security solution.
REQUEST FREE 15 DAY TRIAL or DEMO
BSafe Spec Sheet
WHITE PAPER - How BSafe meets ISO 17799 stringent security requirements
WHITE PAPER - IFS, AntiVirus and BSafe
WHITE PAPER - Addressing Sarbanes-Oxley with BSafe
If your iSeries AS400 is connected to a local or remote network, there are a number of weaknesses in your computer’s defenses. If your company is using a firewall, your iSeries AS400 is still open to attack and your data can be viewed, changed and even deleted without a trace - accidentally or maliciously.
The BSafe/iSeries Security suite is composed of six components, ensuring maximum protection for your iSeries AS400 system.
1. INTRUSION DETECTION SYSTEM (IDS) and ALERT
Alert criteria are defined by you. Real-time notification can be sent via several means (including on-line messages, email, SMS and others)- the moment an intrusion occurs. BSafe/Global iSeries Security suite currently supports the sending of messages under SNMP to the following lead products: IBM-Tivoli, HP-Openview, VISUAL Message Center, CA-Unicenter, Orange-Cellular, IBM-Teledrine, SnapShot/400.
2. INTRUSION PREVENTION SYSTEM (IPS)
The IPS is the core of the BSafe/Global iSeries Security suite. It comprises:
Internet & Intranet Secure Gateway as F/W
Internet - Users Control
Port - Restrictions Control
Network IP - Address Control
TCP/IP Security Gateway
A block that cannot be passed by unauthorized requests. BSafe/Global iSeries Security suite provides flexibility for securing TCP/IP or SNA connections on various levels. Access can be restricted for user, group, IP address, application server/service and specific operations. The wide variety of iSeries (AS400) application servers and services protected by BSafe/Global iSeries Security suite includes:
TCP/IP
Telnet, FTP, TFTP, Remote Command, Remote SQL, Database, Data Queue, ODBC, DDM, DRDA, IFS, Signon, File Server, Central Server, Message Server, Virtual Print, Network Print, WSG Logon and more
SNA
DDM, Pass through, Data Queue, File Transfer, DRDA, entire iSeries network (AS400)
OS400
Delete Journal Receiver, Power Down System, System Attention Key
The system can be protected against selected potentially dangerous services, down to the level of a single action, such as, FTP delete, SQL select statement and OS400 commands which, while allowed in the normal work environment, become suspect when used via the network. Resources can be secured down to the level of a single resource - devices, libraries, objects, files, IFS and customer exit program.
Internet Users Control
BSafe/Global iSeries Security suite allows management of public internet users who are authorized to activate specific applications within the iSeries (AS400). This includes assignment of authorizations, including entry passwords to a specific validation list for each application separately.
Port Restrictions Control
Access to your iSeries (AS400) ports is fully covered against penetration and may be restricted by application, protocol and authorized users.
Network IP Address Control
The Network IP Address Manager is an integral part of management in TCP/IP Network Security. Upon activation of BSafe/Global Security and the Traffic Analyzer, Network IP Address Manager provides you with a list of active IP addresses. authorizations according to your organization's policy.
3. INTERNAL SECURITY MANAGER
BSafe Internal Security Manager manages iSeries (AS400) internal security tools in one convenient easy-to-use GUI. It includes user profile and OS400 object authority management and an advanced audit journal and report manager.
User Profile Manager
Fast and powerful management of OS400 user profiles with maximum information displayed to the administrator and one-click operations.
Object Authority Manager
A flexible, easy-to-use and efficient means to handle permissions and restrictions to OS400 objects.
4. ADVANCED AUDIT JOURNAL AND REPORT MANAGER
The BSafe/Global iSeries Security suite includes innovative GUI management of the System Journal Audit providing full supervision of the system journal audit including management and supervision of receivers, audit policy definition and reports. The sophisticated interactive system journal log provides retrieval while filtering by different criteria. When investigating attempts of security breaches, the advanced audit journal manager turns a previously complex and time-consuming task into a simple and efficient one.
The report manager contains 62 built-in reports, which can be previewed on the screen or printed. Additional reports can be defined by the administrator and saved for later re-use.
5. NETWORK TRAFFIC ANALYZER
The BSafe/Global iSeries Security suite allows monitoring of all network requests to your iSeries network (AS400) servers. The moment they are logged, network requests are available for analysis through a sophisticated system of filtering and graphical presentation. This feature facilitates a real-time picture of your network trends and allows on-the-spot decision-making on security policy, saving precious time and staff costs and allowing identification of possible attack patterns.
Network Traffic Monitoring, Bsafe Log Audit
A detailed log of iSeries network events containing critical information, which is simply absent in the system log (e.g., user ID of user executing FTP commands). The information logged here is available for examination through filtering by different criteria and forms the basis for investigation and analysis via BSafe/Global Security graphical analysis tools.
Network Traffic Analyzer, Summary and Statistics
Summary data and graphs to present distribution of network events, allowing you to determine trends and aiding you in the identification of abnormal activity.
Network Traffic Distribution, Summary by Time
Network activity offset against time, filtered by event type, user and other criteria. The network traffic distribution function features an ECG-like graph and summarizes network requests by year, month, day and even down to the hour.
6. FULL WINDOWS-BASED GUI MANAGEMENT CONSOLE
BSafe/Global iSeries Security suite is controlled through a Windows-based client that is connected to your iSeries (AS400). The product features a full graphical user interface, with one-click operations and on-line help. A single screen simultaneously manages your entire iSeries network.
7. DATAFLOW DATABASE INTEGRITY FOR CRITICAL DATA Despite this multitude of protective measures, control of data integrity remains of the highest importance. The BSafe/Global iSeries Security Dataflow Database Integrity module is built to give you exactly that control. It is a product which allows you to investigate the integrity of changes to your database in your most critical data like client, salary, financial and inventory data.
With the BSafe/Global iSeries Security Dataflow Database Integrity module, you can track changes in your data down to the level of a single item. Field values can be displayed from before and after the change accompanied by a full description of the environment at the time of the change including user, the program through which the change was made and more. You can easily view changes in field values, or details of deleted and added records. The Dataflow Database Integrity module can assist you in making decisions regarding restoring of corrupted data.
The Dataflow Database Integrity's exclusive technology integrates tightly with the iSeries.
