Real-time AS/400 Security events

The IBM System i™ platform (formerly known as AS/400) typically houses the most business critical data in an organization. As companies broaden their focus from perimeter security to insider threats and regulatory compliance, the AS/400 needs to be monitored as diligently as other nodes in the network.

The leading AS/400 security company, PowerTech, sends security events in real time to Security Information Management (SIM) solutions or Intrusion Detection Systems (IDS). PowerTech Interact sends over 500 security events in real time to syslog from the audit journal, operating system, and network. Security Information Management solutions can correlate and aggregate the AS/400 events with logs from many different sources. Users don’t have to worry about configuring batch ftp file transfers or the complexity of language and CCSID conversions.

Enterprise consoles that support AS/400 events from PowerTech include Internet Security Systems™ (ISS) RealSecure® SiteProtector™, ArcSight, and Open Services.

Interact at a glance:

FEATURE	BENEFIT
Sends over 500 different events from the AS/400 to syslog in real time	Integrate with Security Information Management solutions and identify breaches in real-time
Monitors events from the System i audit journal (QAUDJRN)	Examples are changes to user profiles and system values; invalid login attempts; objects that are changed, deleted, moved; intrusion detections etc.
Monitors access through AS/400 exit programs such as ftp, odbc, and remote command	Look for unauthorised access to data across the network
Captures and sends critical operating system messages from QSYSOPR or QSYSMSG	Monitor critical events such as "Profile disabled due to invalid logins" or "Critical storage threshold reached"
Filter events by user, ip address, day, and time, and assign criticality	Customize the information and reduce the volume of events sent to remote consoles
Complex audit journal entries are parsed to extract key information into a readable format	Operators don’t have to be AS/400 experts to read the data

For More Information ...

Visit the Interact pages on PowerTech’s Website or contact us to arrange an evaluation, demonstration, or to discuss your exact requirements in more detail.