Transcript Document

System Control & MSGQ
1
System Control & MSGQ Features
• Uses QSYSOPR or any application message queue data as input to
iSecurity Action module
• Enables corrective or preventive actions based upon real-time
security related events
• Identification of critical computer resource change events (CPU, disk
space, and other WRKSYSSTS parameters)
• Identification of peculiar or highly questionable behavior (not in accord
with behavior models defined in WRKACTJOB)
• Identification of messages in MSGQ and QSYSOPR
• Action module activation (warning notification and CL activation),
once the above are identified
2
System & MSGQ - Manager’s View
3
System & MSGQ- part of Audit
4
Action- Called from System & MSGQ
• Highly sophisticated Intrusion Detection System (IDS) including
warnings and automatic corrective actions
• Includes a CL Command Generator to define corrective response
measures
• Supports standard notification mechanisms (e-mail, SMS, MSGQ,
etc.) as well as program activation
• Proactively responds to real-time network access (Firewall), system
audit log (Audit) and Journal events
5
Sample Action Responses (green screen)
6
Action Command Script: Initiate Capture, Change
User Profile, End Job
7
Thank You!
Please visit us at
www.razlee.com
8