Systems Security Auditing for your iSeries/400

Why should I be interested in producing auditing reports from my iSeries/400?

How many times has every security administrators had this phone call?

User: "My password will not work again."

Administrator: "Have you incorrectly typed it in, or have you recently changed it?"

User: "No, the darn thing just will not work."

Deep down in your heart, you know that the user’s statement is not true. Passwords do not just change themselves, and so this user has more than likely forgotten his. But haven’t you often wished that you had a way to show the user that he keyed his password in wrong. With Secure/Audit reporting on control system values and journal information, you could do just that.

There is a good reason that system auditing is a powerful function of OS/400. It gives you the ability to log events (access to a file, a change to a file, printing operations, etc.) so that you can trace those events, if the need arises. However, even though the iSeries/400 provides a multitude of data on system activity, getting to that data and putting into an easy to read format is not an easy thing to do. Secure/Audit allows easy configuration of the system values so you can quickly develop meaningful reports on user activity.

Secure/Audit covers all of the most important controls which IT auditors and security officers need in order to ensure that their system security is being maintained. Secure/Audit presents its data in a clear, concise format. Even company personnel with a non-technical background can utilize the reporting from Secure/Audit.

Secure/Audit Reports: A selection screen for the reports includes selection by entry type, user, date range, and by program. Each report provides detailed information from the audit journal, including; entry type, date, time, job name, program, object, library, member, user profile, and entry specific data.

Secure/Audit Display: The display includes a query program by entry type, and a query program by user. An inquiry screen displays detailed information from each journal record read and will display user, entry type, job, date, and time. For each record displayed the security officer can display additional detail from the audit journal. S/A provides an F-4 prompt on the display screen to inquire on existing history journal receivers, and to prompt Entry Descriptions. There is also an administration option which will display security audit levels, and provide a menu that will allow administrators to modify the audit system values. There is a function key to enable the administrator to toggle to and from Secure/Net+

 

         FUNCTIONS - Benefits

Control of Adoptions of Authority 

System Value Control

User Profile Control

History Log and Audit Journal Analysis

(Available now) CALL FOR 15-DAY TRIAL)