Vanguard Configuration Manager Customization and Use

Transcription

1 SECURITY & COMPLIANCE CONFERENCE 2016 Vanguard Configuration Manager Customization and Use Bruce Schaefer Manager, Mainframe Products (GRC) VSS-5

2 Legal Notice Copyright All Rights Reserved. You have a limited license to view these materials for your organization s internal purposes. Any unauthorized reproduction, distribution, exhibition or use of these copyrighted materials is expressly prohibited. Trademarks The following are trademarks of Vanguard Integrity Professionals Nevada: Vanguard Administrator Vanguard Configuration Manager Vanguard Advisor Vanguard Configuration Manager Enterprise Edition Vanguard Analyzer Vanguard Policy Manager Vanguard SecurityCenter Vanguard Enforcer Vanguard Offline Vanguard ez/token Vanguard Cleanup Vanguard Tokenless Authenticator Vanguard PasswordReset Vanguard ez/piv Card Authenticator Vanguard Authenticator Vanguard ez/integrator Vanguard incompliance Vanguard ez/signon Vanguard IAM Vanguard ez/password Synchronization Vanguard GRC Vanguard Security Solutions Vanguard QuickGen Vanguard Security & Compliance Vanguard Active Alerts Vanguard zsecurity University 2

3 Legal Notice The following are trademarks or registered trademarks of the International Business Machines Corporation in the United States, other countries, or both: CICS CICSPlex DB2 eserver IBM IBM z IBM z Systems IBM z13 IMS MQSeries MVS NetView OS/390 Parallel Sysplex RACF RMF S/390 System z System z9 System z10 System/390 VTAM WebSphere z Systems z9 z10 z13 z/architecture z/os z/vm zenterprise Java and all Java-based trademarks are trademarks of Oracle and/or its affiliates. UNIX is a registered trademark of The Open Group in the United States and other countries. Microsoft, Windows and Windows NT are registered trademarks of Microsoft Corporation. Other company, product, and service names may be trademarks or service marks of others. 3

4 Topics Getting Started Common Configuration Data Collection Excluding Categories and Checks Execution Compensating Controls Reporting 4

5 Getting Started 5

6 Getting Started 6

7 Getting Started 7

8 Getting Started After Allocation 8

9 Getting Started Jobcard 9

10 Getting Started - Jobcard 10

11 Getting Started - Jobcard 11

12 Getting Started - Display 12

13 Getting Started - Help 13

14 Common Configuration 14

15 Common Configuration - ACOMPROD 15

16 Common Configuration - ACOMPROD 16

17 Common Configuration - ACOMPROD 17

18 Common Configuration - ACOMPROD 18

19 Common Configuration - ACOMPROD 19

20 Common Configuration - ACOMPROD There are 38 of these questions asking what products are installed. 20

21 Common Configuration 21

22 Common Configuration Simple Questions 22

23 Common Configuration Configuration Files 23

24 Common Configuration - List of Users 24

25 Common Configuration Expand group 25

26 Data Collection 26

27 Data Collection PF11 27

28 Data Collection PF11 28

29 Data Collection 29

30 Data Collection 30

31 Data Collection 31

32 Data Collection 32

33 Data Collection 33

34 Data Collection 34

35 Data Collection 35

36 Data Collection 36

37 Data Collection 37

38 Data Collection 38

39 Data Collection - List Questions 39

40 Data Collection - List Questions 40

41 Data Collection - List Questions 41

42 Data Collection - List Questions 42

43 Data Collection - List Questions 43

44 Data Collection - List Questions 44

45 Data Collection - List Questions 45

46 Data Collection - List Questions 46

47 Data Collection - List Questions DISPLAY U READ MVS.DISPLAY.U * DISPLAY WLM READ MVS.DISPLAY.WLM * DISPLAY XCF READ MVS.DISPLAY.XCF * DUMP CONTROL MVS.DUMP a o s t Y DUMPDS UPDATE MVS.DUMPDS a o s t FORCE device CONTROL MVS.FORCE.DEV.device a o s t Y FORCE jobname CONTROL MVS.FORCE.JOB.jobname a o s t Y The previous command is for a job that is not a started task. FORCE jobname.id CONTROL MVS.FORCE.STC.mbrname.id a o s t Y FORCE id CONTROL MVS.FORCE.STC.mbrname.id a o s t Y The previous command is for a started task for which an identifier was provided. FORCE jobname CONTROL MVS.FORCE.STC.mbrname.jobname a o s t Y The previous command is for a started task for which an identifier was not provided. mbrname is the name of the member containing the JCL source. Auth column a - AUTOAUDT, Automated operations. c - CONSOLES, System consoles d - DASDAUDT, Storage Management o - OPERAUDT, Operations staff s - SYSPAUDT, Systems Programming staff t - TSTCAUDT, Trusted Started Tasks * - All Users 47

48 Excluding Categories and Checks 48

49 Excluding Categories and Checks 49

50 Excluding Categories and Checks 50

51 Excluding Categories and Checks 51

52 Review We have installed Vanguard Configuration Manager We have created our Input and Results datasets We have answered all the Common Collection questions We have collected the data for all the checks we want to do We have excluded Categories and/or Checks that we don t want to do Wow, we are 90% done!! 52

53 Execution 53

54 Execution 54

55 Execution 55

56 Execution 56

57 Execution 57

58 Execution 58

59 Execution 59

60 Execution 60

61 Execution 61

62 Execution 62

63 Compensating Controls 63

64 Compensating Controls 64

65 Compensating Controls 65

66 Compensating Controls 66

67 Reporting - View 67

68 Reporting - View 68

69 Reporting - Report 69

70 Reporting - Report 70

71 Reporting - Select 71

72 Reporting - Select 72

73 Reporting - Batch 73

74 Reporting - Batch 74

75 Reporting - Batch 75

76 Reporting - Batch 76

77 Reporting - Batch 77

78 Reporting - Batch 78

79 Reporting - Batch 79

80 Reporting - Batch 80

81 Reporting - Batch 81

82 Reporting - Batch 82

83 Reporting - Batch 83

84 Questions 84