Bsafe Information Systems, which as of May 1 will be known as Enforcive, Inc., has announced a major new release for Bsafe/Enterprise Security for IBM i. 

V7.1 introduces Message Queue (MSGQ) and System History (QHST) Log Monitoring, full IBM command protection and new Policy Compliance Manager templates, broadening the tools organizations can deploy to increase security and simplify compliance processes on their IBM i. Visit Bsafe in Booth 327 at COMMON, Minneapolis, May 1-4. 

Shimon Bouganim , CEO of Bsafe Information Systems stated that: "This new release is the result of working closely with several large organizations which have specific compliance requirements regarding data access on IBM i. It provides our customers new tools to automatically enforce strict adherence to regulatory mandates." 

New features in this release include:

• New modules for Message Queue and System History Monitoring
  • Bsafe/Enterprise Security v7.1 contains two new modules: Message Queue (MSGQ) Monitor and System History (QHST) Monitor. The development for these modules was at the request of customers wanting to further broaden the view of system activity within Bsafe/Enterprise Security. These modules will make it easier to interpret the behavior of users, applications and devices and allow organizations to do away with manual event management. Specific events and messages can be isolated through online filtering. In both modules a user can create and manage message groups through the Bsafe GUI-based console. Users can, for example, group messages that are related to a specific business process. In addition, history management of events and messages is provided through the Bsafe/Central Audit in a highly intuitive way. The Message Queue and System History modules are fully integrated with the Report Generator providing a wide scope of functionalities.
•  Policy Compliance Manager enhancements
  • The Policy Compliance Manager enables organizations to run comparisons between desired policies and existing OS400 settings across multiple servers and partitions generating deviations reports. Deviations can then be corrected on the spot or through a scheduled job. Many organizations utilize the Policy Compliance Manager to demonstrate enforcement of controls on their IBM i servers required by a large variety of regulations. In this release, new categories for comparison have been added for IFS, authorization lists, and audit settings of the system. In addition, alerts can be configured to inform security officers and systems administrators of policy deviations.
•  Full IBM Command Protection and Monitoring
  • Securing and auditing of specific IBM commands can now be fully controlled by this new feature. Access to IBM commands, whether interactive or initiated from the TCP/IP environment, can now be regulated through by Bsafe Account Types including: User Profiles, Group Profiles, Custom Bsafe Groups, IP address Ranges and by System Default. These commands can now also be monitored through the Bsafe/Application Audit and be reported on through the Bsafe/Report Generator. With this new functionality an organization can have further control and clear usage policies for each command line.
• IP Address-based Security
  • Bsafe has significantly increased the number of exit points for which access can be regulated via IP address or IP address range. This enhanced capability allows an organization to enforce location based access controls and restrict access from unauthorized locations.
• COBIT and ISO Accelerator Packages
  • Many organizations deploy best practices and standards as the foundation for their regulatory compliance efforts. In order to enforce and optimize compliance and reporting processes related to IBM i operations Bsafe now offers two packages, the COBIT Accelerator Package and the ISO Accelerator Package. The COBIT Accelerator Package is based on COBIT 4.1. The ISO Accelerator Package is based on ISO 17799. Both Packages contain predefined reports, alerts and Policy Compliance Manager templates that have been mapped to standard COBIT and ISO respectively.
• Syslog-Based Export
  • Bsafe/Enterprise Security for IBM i now allows its logs or event sets to be exported in syslog format. Companies looking to consolidate IBM i events with logs and event types from other server platforms and databases now have this option available to them. Products that can receive events from Bsafe/Enterprise Security V7.1 include Nitrosecurity, Netforensics, Splunk, and Syslog NG.