IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  ACMON SIM_VIA=NOTHING

    Posted Thu March 27, 2025 06:06 PM

    Truist Data Risk Classification: [-Internal-]


    Greetings,

     

    I ran an Access Monitory job and added the SIM_VIA in the SORTLIST to Simulate Access.  Some of the SIM_VIA came back as NOTHING.  Does anyone know what NOTHING means from SIM_VIA.  There are cases where an ID accessed the same profile via ID_GROUP and NOTHING.

     

    Thanks in Advanced for your help.

     

    Rgrds,   

     

     

     

     

    Willie Crosby

    Asst. Vice President

    Cybersecurity Senior Engineer

    303 Peachtree Center Ave. NE 4th Floor | Atlanta, GA. 30303

    Mail Code GA-ATL-0201

    Office: 404.575.2963

    willie.crosby@truist.com

     

    BB&T and SunTrust are now Truist

     



    The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer.


  • 2.  RE: ACMON SIM_VIA=NOTHING

    Posted Fri March 28, 2025 04:16 AM
    Edited by Tom Zeehandelaar Fri March 28, 2025 05:08 AM

    Hi Willie,

    in fact this is documented here: https://www.ibm.com/docs/en/szs/3.1.0?topic=records-access-field-descriptions#select_list_fields_access_field_descs__SIM_VIA

    SIM_VIA
    Access simulation did not use any connect attribute or profile to determine the event result; for example, because the event was for a command that created the profile. NOTHING is also used to report on access by the audit-only ID *BYPASS*.

    Regards,



    ------------------------------
    Tom Zeehandelaar
    z/OS Security Enablement Specialist - zSecure developer
    IBM
    ------------------------------

    Original Message


  • 3.  RE: ACMON SIM_VIA=NOTHING

    Posted Fri March 28, 2025 09:54 AM

    Truist Data Risk Classification: [-Private-]


    Thanks Tom....

     

    Rgrds,

     

     

     

     

    Willie Crosby

    Asst. Vice President

    Cybersecurity Senior Engineer

    303 Peachtree Center Ave. NE 4th Floor | Atlanta, GA. 30303

    Mail Code GA-ATL-0201

    Office: 404.575.2963

    willie.crosby@truist.com

     

    BB&T and SunTrust are now Truist

     



    The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer.



    Original Message


Related Content