New features in V7 can both limit and audit internal user access.
CCSS has announced new security features in V7 of QMessage Monitor (QMM), the company's real-time message monitoring and escalation solution. The latest version of QMM has option-level security, which gives administrators greater power to limit both individual and group use of functions and individual records.
Using the new functions, security lists can be created and maintained by administrators who can assign other users to form a particular group (e.g. Support) and dictate its level of access to QMM functions. Once a security list has been defined, these lists can be entered against a range of options including: Automated Responses, Events, Escalation Procedures and Exit Programs, among others. For each option, there is a separate create and access authority which is indicated with the list name. For example, the members of security list known as "Support" may be able to access escalation procedures, but only members of the "Administrator" list will be able to create new records or procedures. Users can easily determine who has access to delete, change or copy individual records in the QMM database.
Should a user who has access to a particular system record but does not have the authorization to create or change records (because he is not on the list of users allowed to perform these actions) then he will be prevented from doing so if he tries to breach the limits of his authorization. Access attempts of this nature can be audited for full compliance, ensuring the highest levels of visibility—regardless of whether the attempt was benign or malevolent. By adding this to the usual message queues being monitored by QMM, real-time insight of security violations can be identified with full details (including user, type of violation and result) and escalated for the immediate attention of administrators.
The new option level security features are extended further with an ability to secure sequence number ranges. In this case, IT Managers or administrators can use the Auto-Reply Specifications maintenance screen in QMM to add a group (e.g. Support) and include a sequence number with this "Support" security list to prevent unauthorized users from updating or adding records within this range. Again, any user attempts to update, change, copy, add or delete any records within this range will be blocked and the attempt can generate an audit message which is sent to the security message queue.
"These new security features go to the heart of how users work in demanding real-world environments," says Paul Ratchford, product manager for CCSS. "In large scale environments, data centers in multiple locations for instance, you might have three or more administrators at each site—so in theory, that’s nine people with the ability to make one small change that could impact everyone. These new features focus on four key access areas: Option, Create, Record, and Auto-Reply. All of it is auditable and that’s extremely important in creating and maintaining a transparent and accountable environment."
The enhancements seen in V7, which include the new Database Monitoring function, are most distinguished by their focus on security, but additionally, CCSS has included several time-saving features relating to the installation and PC user interface. V7 supports an ability to easily export rules, shortcuts, and even the "look and feel" of a PC configuration, much like a customized template, which is particularly useful and time-saving for managed services environments or sites with a large number of users. Users will also benefit from the new capability which automatically checks to ensure the latest version of the PC software is installed for any PC connected to the central iSeries system. If an older version is running, then the newer version will be automatically downloaded to the PC. This feature will increase consistency of PC-to- iSeries software throughout the environment, reducing the chance of errors, requirement for support assistance and time spent on upgrading PCs.
For more information about QMessage Monitor V7 and a guided tour of all the new features hosted by product manager Ratchford, click here.
More than ever, there is a demand for IT to deliver innovation. Your IBM i has been an essential part of your business operations for years. However, your organization may struggle to maintain the current system and implement new projects. The thousands of customers we've worked with and surveyed state that expectations regarding the digital footprint and vision of the company are not aligned with the current IT environment.
TRY the one package that solves all your document design and printing challenges on all your platforms. Produce bar code labels, electronic forms, ad hoc reports, and RFID tags – without programming! MarkMagic is the only document design and print solution that combines report writing, WYSIWYG label and forms design, and conditional printing in one integrated product. Make sure your data survives when catastrophe hits. Request your trial now! Request Now.
Forms of ransomware has been around for over 30 years, and with more and more organizations suffering attacks each year, it continues to endure. What has made ransomware such a durable threat and what is the best way to combat it? In order to prevent ransomware, organizations must first understand how it works.
Disaster protection is vital to every business. Yet, it often consists of patched together procedures that are prone to error. From automatic backups to data encryption to media management, Robot automates the routine (yet often complex) tasks of iSeries backup and recovery, saving you time and money and making the process safer and more reliable. Automate your backups with the Robot Backup and Recovery Solution. Key features include:
Business users want new applications now. Market and regulatory pressures require faster application updates and delivery into production. Your IBM i developers may be approaching retirement, and you see no sure way to fill their positions with experienced developers. In addition, you may be caught between maintaining your existing applications and the uncertainty of moving to something new.
IT managers hoping to find new IBM i talent are discovering that the pool of experienced RPG programmers and operators or administrators with intimate knowledge of the operating system and the applications that run on it is small. This begs the question: How will you manage the platform that supports such a big part of your business? This guide offers strategies and software suggestions to help you plan IT staffing and resources and smooth the transition after your AS/400 talent retires. Read on to learn:
LATEST COMMENTS
MC Press Online