IBM Tivoli Risk Manager Provides Protection for the Enterprise through Intrusion and Protection Management

Transcription

1 Software Announcement October 15, 2002 Provides Protection for the Enterprise through Intrusion and Protection Management Overview IBM Tivoli Risk Manager is an enterprise risk management solution that enables customers to centrally manage and respond to diverse security threats and intrusions that target their enterprise. Risk Manager handles security alerts from a single security console. The communications and control center centrally manages enterprise vulnerabilities and enables businesses to detect and assess attacks, threats, and exposures. It correlates security information and risk alerts from firewalls, routers, networks, host- and application-based detection systems, desktops, and vulnerability scanning tools. Key Prerequisites requires an AIX, Sun Solaris, or Microsoft Windows operating system platform. Planned Availability Dates October 18, 2002 (for electronic download) October 25, 2002 (for media availability) End of Support Consistent with the IBM Tivoli end of support policy, IBM Tivoli support for V3.8 will be discontinued on October 25, 2003, which is 12 months after the general availability date of IBM Tivoli Risk Manager V4.1. At a Glance provides: Secure communications via Secure Sockets Layer (SSL) Ease of deployment and configuration via InstallShield MultiPlatform tool Performance and scalability enhancements Support for Tivoli Enterprise Data Warehouse Support for Service Provider environments Support for topology view through integration with NetView For ordering, contact: Your IBM representative, an IBM Business ner, or IBM Americas Call Centers at 800-IBM-CALL Reference: YE001 This announcement is provided for your information only. For additional information, contact your IBM representative, call 800-IBM-4YOU, or visit the IBM home page at: IBM United States IBM is a registered trademark of International Business Machines Corporation

2 Description provides extensive functions and features. Following is an overview of the product: Enables the customer to monitor, view, and manage security alerts throughout the organization with a simple, easy-to-use enterprise security console. Provides a common data format and naming convention for alerts using Intrusion Detection Exchange Format (IDEF), a draft Internet Engineering Task Force (IETF) specification, and the Common Vulnerability and Exposure (CVE) standard. Provides an out-of-the-box solution for integrated management of the perimeter security (demilitarized zone, or DMZ) in your e-business environment. Leverages advanced correlation techniques designed to reduce, aggregate, correlate, and classify the thousands of individual security alerts into severity categories that can be administered and answered. Helps to eliminate clutter, such as false-positive alerts, and quickly identifies security threats to address response time. Provides analytical and Web-based historical reporting to show patterns of intrusions, system and network usage, and compliance with security policies. Provides a variety of predefined reaction tasks to quickly resolve urgent security issues, such as denial of service attacks, viruses, or unauthorized access. Leverages integration with the full range of Tivoli network, system, and security management products to take long-term corrective actions and help improve enterprise security policies. Includes optional intrusion detection, developed by Tivoli in collaboration with IBM Research. Components include a powerful, low-overhead network intrusion detection system that detects more than 200 known attacks and a Web intrusion detection system that can detect attacks launched using HTTP or SSL (HTTPS) against Web servers. New functions added with Tivoli Risk Manager V4.1 include: Support for secure communication between the Risk Manager adapters and servers via Secure Sockets Layer (SSL). SSL-based communication support is provided in both the Tivoli framework environment and the non-framework (TCP/IP) environments. Support for Managed Service Provider environments by segmentation and correlation of event data by customers. Ease of deployment and configuration of a risk manager server and adapters via multiplatform InstallShield. Distributed correlation engine support to enhance performance and scalability. Support for trend analysis / historical reporting and security service level information via integration with Tivoli Enterprise Data Warehouse. Support for topology view of the enterprise s security environment through integration with NetView. Reference Information To review the Tivoli Risk Manager V3.8 announcement, refer to Software Announcement , dated September 25, Trademarks AIX and NetView are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Microsoft is a trademark of Microsoft Corporation. Windows is a registered trademark of Microsoft Corporation. Tivoli Enterprise is a trademark of International Business Tivoli is a registered trademark of International Business Other company, product, and service names may be trademarks or service marks of others

3 IBM US Announcement Supplemental Information October 15, 2002 Education Support Title Order Training is available for many IBM Tivoli products. Education is offered through IBM Learning Services, and through IBM Tivoli Systems. Worldwide information about education offerings is available on the IBM Learning Services home page at: For current information on IBM Tivoli Systems education, call , or visit the IBM Tivoli Systems home page at: Offering Information Product information is available through Offering Information (OITOOL) at: and through the Passport Advantage Web site at: Publications No publications are shipped with this program. The following publications can be ordered after planned availability. The Publications Notification System (PNS) is available by order number or product number. Customers currently subscribing to PNS will automatically receive notifications by . Customers who wish to subscribe can visit the PNS Web site location at: The IBM Publications Center Portal: They will also be available from the Tivoli Information Center: /public_manuals/td/td_prod_list.html The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided, as well as payment options via credit card. Furthermore, a large number of publications are available online in various file formats, which can currently be downloaded free of charge. Note that PNS subscribers most often order their publications via the Publications Center. Release Notes V4.1 User s Guide V4.1 Adapters Guide V4.1 Developer s Guide V4.1 Problem Determination Guide V4.1 Technical Information Specified Operating Environment Hardware Requirements For Servers IBM RS/6000 server with: GI SC SC SC SC way 750 MHz CPU 1.5 GB RAM recommended, 512 MB minimum 4 GB disk recommended, 2 GB minimum (for code, DB, and Sun UltraSparc II with: 2-way 1 GHz CPU 1.5 GB RAM recommended, 512 MB minimum 4 GB disk recommended, 2 GB minimum (for code, DB, and Intel Pentium 4 processor with: 2.2 GHz CPU recommended, 1.0 GHz CPU minimum 1.5 GB RAM recommended, 512 MB minimum 4 GB disk minimum, 2 GB recommended (for code, DB, and For Clients and Gateways IBM RS/6000 client or gateway with: 1-way 750 MHz CPU This announcement is provided for your information only. For additional information, contact your IBM representative, call 800-IBM-4YOU, or visit the IBM home page at: IBM United States IBM is a registered trademark of International Business Machines Corporation

4 512 MB RAM recommended, 256 MB minimum 2 GB disk recommended, 1 GB minimum (for code and Sun UltraSparc II processor with: 1-way 1 GHz CPU 512 MB RAM recommended, 512 MB minimum 2 GB disk recommended, 1 GB minimum (for code and Pentium 4 processor with: 1.5 GHz CPU recommended, 1.0 GHz CPU minimum 512 MB RAM recommended, 256 MB minimum 2 GB disk minimum, 1 GB recommended (for code and For Distributed Correlation Servers IBM RS/6000 server with: 2-way 750 MHz CPU 1 GB RAM recommended, 512 MB minimum 3 GB disk recommended, 2 GB minimum (for code and Sun UltraSparc II processor with: 2-way 1 GHz CPU 1 GB RAM recommended, 512 MB minimum 3 GB disk recommended, 2 GB minimum (for code and Intel Pentium 4 processor with: 2.2 GHz CPU recommended, 1.0 GHz CPU minimum 1 GB RAM recommended, 512 MB minimum 3 GB disk minimum, 2 GB recommended (for code and Software Requirements For Servers, one of these operating systems is required: AIX V4.3.3 AIX 5.1 Solaris 8 Windows 2000 Windows NT and Tivoli Management Framework V3.7.1 Tivoli Enterprise Console V3.8 IBM Java Runtime Environment (JRE) V1.3.1 on UNIX platforms where the Tivoli Risk Manager Agent will be installed For Clients, one of these operating systems is required: AIX V4.3.3 AIX 5.1 Solaris 8 Windows 2000 Windows NT Windows XP HPUX 11 RedHat 7.2 SuSe 7.3 Linux for zseries Planning Information Packaging: is distributed with: International Program License Agreement (Z ) Read Me First Card 26 CD-ROMs Publications (refer to the Publications section) This program, when downloaded from a Web site, contains the applicable IBM license agreement, and License Information (LI), if appropriate, which will be presented for acceptance at the time of installation of the program. The license and LI will be stored in a directory such as LICENSE.TXT for future reference. Security, Auditability, and Control uses the security and auditability features of the operating system software and the Tivoli Management Framework. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities. Ordering Information Passport Advantage Customer Media Pack Entitlement Details Customers with active maintenance or subscription for the products listed below are entitled to receive the corresponding media pack. Entitled Maintenance Offerings Tivoli Risk Manager V3.8 Processor Tivoli Risk Manager V3.8 Network Node Media Pack Description Tivoli Risk Manager V4.1 Media Pack Multilingual BJ07FML

5 New Licensees Orders for new licenses will be accepted now. Shipment will begin on the planned availability date. Ordering Information for Passport Advantage The quantity to be specified for the Passport Advantage part numbers in the following table is per processor and per network node. To order for Passport Advantage, specify the desired part number and quantity. Description Charge Unit: Processors 1st Anniversary 2nd Anniversary Software Maintenance Renewal Software Maintenance after License Charge Unit: Network Nodes 1st Anniversary 2nd Anniversary Software Maintenance Renewal Software Maintenance after License D512MLL D512NLL E009MLL D512PLL D514ZLL D5150LL E00AGLL D5151LL To order a media pack for Passport Advantage, specify the part number in the desired quantity from the following table: Description Media Pack Multilingual BJ07FML Withdrawal of Passport Advantage s The following Passport Advantage part numbers will be withdrawn on December 12, 2002: Description Tivoli Risk Manager V3.8 Media Pack Tivoli Risk Manager V3.8 Documentation Pack English BJ03FML BJ03MIE Terms and Conditions Agreement: For orders under Passport Advantage: IBM International Program License Agreement (IPLA), IBM International Passport Advantage Agreement (PAA), and an IBM International Passport Advantage Agreement Enrollment Form Transferable: Yes, except for programs acquired at a discount or allowance Limited Warranty Applies: Yes Guarantee: 30-day money-back guarantee Usage Restriction: Yes. Usage is limited to the quantity of processors and clients (network nodes) licensed. Volume Offering (IVO): No Upgrade Protection Applies: Covered as long as Software Maintenance is in effect Educational Allowance Available: education institution customers Licensed Program Materials Availability Restricted Materials of IBM: None Nonrestricted Source Materials: None Object Code Only (OCO): All Maintenance Applies Yes, to qualified Software Maintenance under Passport Advantage: Yes Software Maintenance for IBM Tivoli Products: No Complementary Introductory Support: Not available Program Services and End of Support: Program services for an IBM Tivoli program are one year from the date IBM or your Business ner makes the program available to you. The program services duration period shall be less than one year for programs acquired after the announcement of a program s end-of-support (EOS) date. EOS for programs or versions and releases of programs will be announced 12 months before the effective date. Software Maintenance for IBM Tivoli Products and Passport Advantage Support Center Applies: Yes. Access is available through the IBM Support Center, Support Web Site for Problem Reporting: /products/support/ Availability of Passport Advantage Software Maintenance: Passport Advantage Software Maintenance is provided at no additional charge for each eligible program acquired until the first anniversary date. For an additional fee, a license can be acquired with maintenance to the second anniversary date. Passport Advantage Software Maintenance is provided for renewal for a fee at each anniversary date. Customers who do not renew their Software Maintenance will have to purchase the

6 Maintenance after License option to renew their maintenance agreement when they require a new level of software code or remote technical support. Software Maintenance and Passport Advantage Software Maintenance Available Until: Twelve months after announcement of product discontinuance, which is the end of life (EOL) Software Maintenance and Passport Advantage Software Maintenance Applicable To: The current release The immediate previous release for 12 months after the general availability of the current release APAR Mailing Address: IBM Burnet Road Austin, TX Attention: Product Development IBM Operational Support Services Support Line: No Product Web Site: A complete list of products, terminology definitions, and licensing documents are available at the following Web site: Prices Passport Advantage For Passport Advantage and charges, contact your IBM representative or your authorized IBM Business ner. For additional information about the Passport Advantage offering, visit the following Web site: Order Now Use Priority/Reference Code: YE001 Phone: Fax: Internet: Mail: 800-IBM-CALL 800-2IBM-FAX ibm direct@vnet.ibm.com IBM Atlanta Sales Center Dept. YE001 P.O. Box 2690 Atlanta, GA You can also contact your local IBM Business ner or IBM representative. To identify them, call 800-IBM-4YOU. Note: Shipments will begin after the planned availability date. Trademarks zseries is a trademark of International Business Machines Corporation in the United RS/6000 and AIX are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Intel and Pentium are registered trademarks of Intel Corporation. Windows and Windows NT are registered trademarks of Microsoft Corporation. Java is a trademark of Sun Microsystems, Inc. UNIX is a registered trademark of the Open Company in the United States and other countries. Tivoli Enterprise is a trademark of International Business Tivoli is a registered trademark of International Business Other company, product, and service names may be trademarks or service marks of others