“The audit journal shipped with the IBM i, when switched on, is absolutely fantastic and provides the ability to track a vast number of activities that typically take place on a busy machine. Ashley Giddings, Sen. Tech. Services Manager, Halcyon Software
(PRWEB) November 27, 2010
Halcyon Software announced the release of Audit Journal Manager, a specialist utility for IBM i enabling real-time alerting and reporting from the audit journal; the software also assists with intrusion detection.
The original name for the product was Audit Journal Monitor but for this major new release Halcyon renamed the software to Audit Journal Manager to reflect the significantly expanded functionality.
The new Halcyon Audit Journal Manager enables users to detect and notify on any attempted security violations, monitor and report on the access to confidential information, considerably reduce labour-intensive reporting tasks and plan a migration to a higher security level.
Ashley Giddings, Senior Technical Services Manager at Halcyon software said “The audit journal shipped with the IBM i, when switched on, is absolutely fantastic and provides the ability to track a vast number of activities that typically take place on a busy machine. However it’s not uncommon for upwards of 3000 entries to be written to the audit journal (“QAUDJRN”) every minute. The sheer number of entries can cause a headache for
IBM i technicians as processing and reporting on these can be very time consuming. The new Audit Journal Manager from Halcyon eliminates laborious reporting tasks by allowing users to schedule and adapt their own reports using the customised reporting facility or by using the 36 pre-configured examples to suit their auditing requirements. Based on customer feedback further enhancements have been added to boost the real-time alerting facility to assist with intrusion detection”.
Other features include: an ability to control and restrict which specific users can perform which product functions as well as in-depth logging to track and report on “who did what and when”. Sets of rules can be grouped to monitor at different days, times, applications or even different users. Once these rules are defined, the software enables administrators to rollout across multiple IBM systems or logical partitions.
The new alerting features allows security notifications to be delivered by SMS, email, SNMP Trap, or by Syslog or an audible alert on a console and the software has the automatic ability to run an IBM i command or call a program.
Real-time messages about security breaches can be overwritten with text to ensure the intended recipient understands exactly what is happening on the system in terms he or she comprehends.
The key benefits for security officers and systems administrators are the continuous monitoring for changes made to user profiles, (e.g. changing their authority to higher levels), the quick detection when invalid attempts are made to sign on – (e.g. especially if this happens to be QSECOFR), being informed when sensitive objects (such as the Payroll file) are created, deleted, restored, moved or renamed or access rights to sensitive information are changed.
Authority failures can also be detected and brought to a security officer’s immediate attention. For example, a user might be attempting to access an object that they are not authorized to, such as the supplier master file.
The new software also allows IBM i customers to keep a close scrutiny on user profile swapping, as well as changes to system values (security settings) which can be tracked and traced as these can have a significant impact on areas of security and system performance.
To learn more customers can visit: http://www.halcyonsoftware.com/products/auditjournalmanager/
About Halcyon Software
Halcyon Software is a global leader in multi-platform systems management software. With more than 20 years of delivering proven solutions and first class customer support, Halcyon’s products proactively monitor, manage and automate IT operations. Large multi-nationals, corporate and public sector data centres as well as small to medium sized organizations throughout the world rely on Halcyon Software to ensure their mission-critical systems, core applications and services are available 24/7.
Halcyon solutions support IBM enterprise class systems, including the IBM i®, AIX® as well as Windows®, UNIX® and Linux® platforms.
Halcyon Software reduces the complexity of systems monitoring and automation. Solutions deliver real ROI by automating 100 percent of routine tasks to free up valuable resources, reduce operating costs and minimize the risk of human error.
With regional offices in Peterborough UK, Philadelphia, USA and Melbourne, Australia, Halcyon also has a world-wide network of partners and distributors supporting EMEA the Americas, and Asia Pac territories.