Rich and unique system of alerts, following a wide range of IBM i system conditions and events. Alert delivery can take a number of different forms including email, on screen display and others
Architecture
- Alerting of a variety of events including authorized and unauthorized access at exit point level, compliance checks, system health checks, database field changes, message queue messages and system journal events
- Handling of collected event information by the IBM i or by windows based alert handler
- Events covered: Exit point, system journal, file journal, message queues, Policy Compliance Manager deviations, SQL Statements
Highlights
- Granular condition definition. Alerts can be conditioned from general to highly specific triggering criteria, such as specific SQL statements or FTP sub-functions on a specific library or file
- Multiple alert actions including email, writing to windows event log, displaying on screen, SNMP traps and output to syslog
- Multiple pro active alert actions including calling a program, disabling a user profile, changing user authority etc
- Database field value change alert
Organizational Benefits
- Automatic alerting of breeches
- Fast reaction to security incidents
- Automatic blocking of suspicious users
- More control of events in the system
- Meeting of regulatory compliance requirements
