Security Monitoring & Management

This talk covers how the Security Monitoring & Management component within the Suite allows you to maintain compliance and remain vigilant to events which have security implications. Topics covered include: real-time alerting through SMS, audit journal monitoring and automatic saving of the system and security settings.

Enterprise Console

Is a graphical user interface (GUI) to view all messages, events and alerts generated on any number of servers, LPARs and even different platforms. This gives you the option of either centralized or remote monitoring and management since multiple enterprise consoles can be located in different locations. Interfaces into a number of Help Desk systems for additional benefit.

Message Manager

Monitors any message queue and the QHST log for messages and events, such as a user profile or device being disabled after multiple attempts to sign on using an incorrect User ID or password. Monitor for unusual activity or changes in behavior, for example certain users signing on late at night or at weekends. Comprehensive filters allow you to monitor for very specific events concerning a particular user, job, program or time range or specify generic and global criteria.

Message Communicator

Alerts you by text message or email when an important alert is raised. Includes escalation lists, broadcast groups, schedules and rotas so that the appropriate on-call member of staff can be notified. Message replies can be sent and OS/400 commands can be executed remotely via your mobile phone using the 2 way SMS facility.

Audit Journal Manager

Provides a real-time monitoring of the OS/400 audit journal QAUDJRN which is the place where OS/400 logs security events. With Audit Journal Manager you will know when changes have been made to user profiles - such as when a user's special authority has been changed (to add ALLOBJ, for example), a new group profile is added or removed, or their limited capability setting modified. You will also know when system values are changed, objects are created, deleted, restored or an object's owner has been changed. Authority failures can be quickly detected allowing you to identify exactly who is trying to inappropriately access private or confidential data. Flexible reporting options are also provided (which can be scheduled on a regular basis) that will demonstrate proactive security compliance monitoring to your auditors.

Inactivity Manager

Prevent unauthorized users from gaining access to business critical, confidential or sensitive information by ensuring that screens are not left signed on when users are called away or leave their workstation unattended. Any period of activity can be selected from 1 minute upwards with flexible options allowing different users, programs or jobs to be monitored for different lengths of inactivity. Automatic actions can include signing off sessions, disconnecting sessions or activating a screen saver, which can be password protected.

Restricted Tasks Manager

Enables you to regularly save your system and security settings automatically and completely unattended. Any number of restricted state tasks such as SAVSEC, SAVSYS etc. can be scheduled to start a specific date and time, or can be submitted to a job queue to be processed as soon as the jobs in front of it have completed, making the most of tight time windows. Messages can be answered or sent out to a mobile phone before, during or after the restricted state process for complete state of mind

Security Compliance Monitoring Suite