System i Security and Compliance

iSecurity is the most encompassing, insightful and user-friendly iSeries security solution for the System i market. The product's well thought-out and developed protective mechanisms are uniquely engineered for the System i server environment, greatly minimizing any interference with the server's on-going production needs. All products are defined, developed and supported by System i experts who provide them with critical, intimate knowledge of the OS and its related technologies. iSecurity's development has been enhanced by the capture and integration of customers' real world requirements during the design phase. iSecurity provides users with as/400 security solutions meeting SOX (Sarbanes Oxley), HIPAA, GLBA and similar recognized standards and requirements. With iSecurity, SEA defines the standard for System i security!

Robust System i Security Solutions

iSecurity consists of distinct System i security solutions to meet the full scope of System i security requirements and relate more effectively to the specific needs of various customer and application segments. The iSecurity solution is aimed at top-tier, corporate customers as well as small and medium sized enterprises. These solutions assure customer specific ROI; no other iSeries security product fits these requirements within the System i market pyramid.

iSeries Security System Overview

Firewall - Intrusion Detection & Prevention

iSecurity Firewall provides complete protection against all types of access related security risks on your System i Server. Firewall has the ability to monitor security related exit points for unauthorized access, block users from gaining access via poor password policies and strengthening an organizations management of user profiles. Firewall has the ability to control access by IP address, location, date and time, library and down to the object level. iSecurity's Firewall provides complete intrusion prevention including the ability to manage passwords, control screen sessions, manage sign on attributes and graphically analyze data.

Audit - Compliance Monitoring

iSecurity Audit provides complete monitoring of system related activities and initiates responses to potential threats in real time. iSecurity Audit's real time response can trigger alerts and take immediate corrective actions. Recent regulations have placed security auditing as a key component of any organization's IT security program. Management must ensure that security policies and procedures are properly implemented and enforced. This iSeries security module gives organizations the flexibility to audit and report on all critical events for internal security requirements or for compliance with Sarbanes-Oxley, HIPAA or GLBA.

Additional iSecurity Modules

Journal

Automatically helps manage database changes by documenting and reporting exceptions made to the database journal. With iSecurity's Journal module, every field is tracked and monitored so that a trigger may be initiated if for example, the amount of a bank loan has been modified by more than 20%. Journal also provides tools and analysis capabilities to compare the changed data values and results with the previous data.

Capture

Silently captures and documents user screens for tracking and surveillance, without affecting system performance. iSecurity's Capture module can run in playback mode and can be used to search within texts. Capture provides three solutions in one product - a powerful auditing solution, a regulation compliance solution, and a help-desk troubleshooting solution.

Assessment

The iSecurity Assessment module enables you to test your iSeries security vulnerability within minutes. Assessment checks your ports, sign-on attributes, user privileges, passwords, terminals, and more. Results are instantly provided, with a score of your current network security status with its present policy, compared to the network if iSecurity were in place.

Anti-Virus

iSecurity's Anti-Virus module offers total protection for the System i against viruses, Trojan horses, and malicious code. Anti-Virus scans all accessed files, offers comprehensive virus detection by marking, quarantining and deleting infected files, and prevents your System i from becoming an infection source. No effective security policy is complete without Anti-Virus.

Filescope

iSecurity's FileScope module is recognized by System i professionals as the leading System i solution for data manipulation. Filescope contains all relevant historical information regarding who created and/or modified data allowing for easy tracing of every modification. Managers can set pre-defined queries for example, if a specific field within a record is changed more than the allowed percentage, the entire audit trail will be sent to the manager via email or printed. The manager will have the ability to undo any set of changes or a particular change which was performed in the database. FileScope provides unprecedented file editing capabilities, while adhering to the highest standards of quality, reliability, security and compliancy.

 

Compliance Evaluator

iSecurity Compliance Evaluator enables managers to quickly check the compliance of their systems with industry and corporate policies based on customizable user-friendly reports. It provides concise one-page reports featuring an overall compliance score, as well as specific ratings for any security-related component of System i, such as system values, network attributes and user profiles. A number of pre-defined spreadsheet plans relating to PCI, SOX and HIPAA security regulations are supplied with the product.

 

 

Authority on Demand

Authority on Demand (AOD) is a unique product for controlling user permissions while flexibly responding to the ever-changing security needs of an organization. Authority on Demand performs real-time audit of access rights in order to protect sensitive corporate assets. It reduces the number of profiles with high-level authorities, while enabling relevant personnel to easily obtain access to approved information upon demand, saving valuable time and resources.

 

Native Object Security

The Native Object Security solution enables system administrators to easily define target security levels per object and object type, and to check for inconsistencies between actual and planned object security settings.

 

User Profile and System Value Replication

The recent trend of consolidating servers has led to the increasing prevalence of multi-system and multi-LPAR shops. Companies have found it mandatory that system administrators and users alike synchronize user profile definitions, user passwords and system values between the different systems.

 

Learn more about SEA and our iSeries security solutions. Request a live demonstration, a free, no obligation 30 day trial or download an iSecurity brochure.  We also offer a free iSecurity Assessment module that enables you to test your System i security vulnerability within minutes.  Click here for your free iSeries security assessment.