Bsafe/Enterprise Security Enhancements v.6.1

Transcription

1 Bsafe/Enterprise Security Enhancements v.6.1 For IBM i, IBM z and CPA

2 Overview Overview More functionality. Improved usability. More reporting power.

3 Platform Oriented Navigation Platform Oriented Navigation Clearer separation of platform groups. Faster, easier interface.

4 Bsafe / Enterprise Security for IBM i Bsafe/Enterprise Security for IBM i

5 New Password Manager Maintenance Menu New Password Manager New option in Bsafe green screen menu. System password policy. Max/min lengths, special characters, expiration, reuse.

6 Replication of Passwords User Profiles Replication of Passwords Enter new password for a user. Then replicate the change to the same user on other machines.

7 Over 200 Predefined Reports Report Generator Over 200 Predefined Reports Grouped by category Can be run as is Can be copied and customized

8 Report Generator Report Groups Report Generator Report Groups Report groups, for single submission of many reports in one go. Memo descriptive text for the report group. New group scheduler.

9 Report Generator Export/Import Report Generator Export/Import Export report definition to PC file. Import report definition to another computer.

10 Report Generator More Flexibility Report Generator More Flexibility Duplicate report function. New fields in System Audit report to give filtering options not available in operating system. New System Audit report field. Data Source: Central Audit or journal receivers.

11 Report Generator - More Clarity Report Generator More Clarity Introduction of Local Machine independent of computer name. Selection Criteria now included in report header.

12 Report Generator Action Descriptions Report Generator Action Descriptions Option of printing code, description or both for action type and codes.

13 Report Generator Warning Messages Report Generator Improved Warning Messages Warnings and error messages displayed in body of report in much more friendly manner. In GUI and in spool.

14 Report Generator Global Settings Report Generator Global Settings Screen Job queue. Out queue. Report view library.

15 Report Generator Cleanup Functions Report Generator Cleanup Functions Delete report viewer output file. Clear job - deletes all job spooled files. Delete spooled output file.

16 PCI Compliance Package (optional module) PCI Compliance Package Helps accelerate PCI compliance projects Predefined PCI Reports Predefined PCI Templates Predefined PCI Alerts Diagram Mapping Bsafe/ES reports, alerts and templates to specific PCI requirements

17 New Commands/Programs New Commands / Programs Integration with IDM systems (optional) Start and stop Bsafe SQL auditing Integration with IDM systems via API to add user to Bsafe group. Start and stop Bsafe SQL auditing from CL programs

18 Simplified Installation Process Simplified Installation Process For new installation and upgrade More automation, less manual operations Quicker execution Fewer human errors

19 Custom Exit for Database Maintenance Menu Custom Exit for Database Custom exit program action for all database server activity.

20 Custom Exit for ChgUsrPrf Control Panel Custom Exit for ChgUsrPrf Custom exit program option for changing of user profile via Bsafe Enterprise Security Manager.

21 Custom Exit for Inactive User Control Control Panel Custom Exit for Inactive User Control Custom exit program action when disabling inactive user. Separate exit program option to handle disabled user (in place of delete).

22 Exit Program Enhancements Control Panel Exit Program Enhancements New exit for change user profile. 2 new exits for Inactive users control. V6R1 ready. Performance improvements.

23 Permissions Report Reports Menu Permissions Report Custom exit programs now included in report.

24 Improved IP Address Management Application Access Control Improved IP Address Management Automatic default for to- IP address. Change of range description. IP range description displayed.

25 Time Restrictions for DB Optimizer Application Access Control Time Restrictions for DB Optimizer Finely control the activity times of the database server optimize.

26 Telnet Device Window Application Access Control Telnet Device Window Device name can now be changed, not just description.

27 Bsafe Activation/Deactivation Alerts Application Audit Bsafe Activation/Deactivation Alerts BSFACTV and BSFINAC commands now logged in Application Audit under Maintenance. Event can be defined in Alert Center for instant warning.

28 Application Audit Improvements Application Audit Improvements Filtering on violations. Changing, deleting, copying, creating of user profile in Bsafe ES Manager now indicates the signed on user, not QTMHHTP1. SSL logged in Telnet event description.

29 Restricted Security Officer Changes Administration Roles Restricted Security Officer Changes Restricted security officer no longer requires special authority to sign on. Can be any defined IBM i user.

30 Member Selection in Custom File Group File Audit Reports Member Selection in Custom File Group Include one or more members in the file

31 Data Queue Recovery Option Commands Menu Data Queue Recovery Option Data queue recovery now included in commands menu.

32 File Size Limit Control Panel File Size Limit Can now specify Percentage of file limit for logging of event i.e. combination of maximum number of records and current number of records will trigger the event.

33 Policy Compliance Adds ASP Policy Compliance Manager Object Authority category - ASP parameter now in selection criteria.

34 Bsafe / Cross Platform Audit Bsafe/ Cross Platform Audit and Consolidation Consolidation of audit events across machines and platforms

35 AIX Platform Added AIX Platform Central Audit - direct viewing of AIX audit events AIX System audit policy DB2 audit policy Importing of events to consolidated Central Data Repository

36 Completely New Linux Module New Linux Module Central Audit - direct viewing of Linux audit events Management of Linux System audit policy Importing of events to consolidated Central Data Repository

37 Central Management System Central Management System 1. Cross Platform Audit Central data repository CPA Analyzer CPA Alerts MS SQL Server Audit 2. Resources 3. Control Panel

38 Correlation Reports Correlation Reports Combined events from different computers. Match on user, time and other parameters. Correlates events by linking activity across computers.

39 Special CPA Reports Special CPA Reports Tailored to the needs of the IBM z administrator. Predefined report types include unauthorized access to resources and multiple IP addresses for user.

40 CPA Contents Reports CPA Contents Reports Audit of database changes. Consolidation across all platforms. Filtering from platform down to database, table and action.

41 Security Operations Center (SOC) Security Operations Center (SOC) Real-time dashboard, monitoring activity in CPA. Choice of frame layouts. Selective display of screen components: tree, grid and graph.

42 CPA Alerts Syslog message option CPA Alerts Syslog message option Send the alert as a message to a specific syslog host

43 MF CPA Audit Policy MF CPA Audit Policy Control of IBM z auditing definitions. Selection of audit logging activity for DB2, RACF, TCP/IP, VSAM and SAFE. Separate control of recording to CPA.

44 MF DB2 Event Filtering MF DB2 Event Filtering Set current SQLID DDL execution statement SQL statement Identity request Signon request Authorization failures Grant and revoke statements Operations on audited Tables

45 MF Auditing DB2 Log MF Auditing DB2 Log Read, write, delete and update operations Real data change, even if the table s structure has been changed Automatically imported field names, types and values Full statistics: who, when and where performed the data change

46 MF SSL Encryption MF SSL Encryption Three options: 1. Regular FTP, no encryption. 2. Both SSL/TLS and regular sessions (explicit). 3. SSL/TLS only (implicit mode).

47 Data Audit also for MS SQL 2000 MSSQL Server Audit Data Audit also for MS SQL 2000 Handling of events from old SQL servers and new, side by side.

48 Systems Systems Automatic consolidation of all computers logging audit data.

49 Control Panel Control Panel Properties of computer hosting the CPA manager: version, O/S, build, modules etc. CPA system parameters such as file limit, report properties MS SQL audit policy.

50 Bsafe/Enterprise Security Enhancements v.6.1 Thank you