IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  zAlert: using SMTP node in a MAS environment

    Posted 04/02/20 07:30 AM
    Hi, I've a trouble with zAlert configuration related to SMTP node specifications.
    The scenario is: two systems, LPAR1 and LPAR2, that use the same SPOOL (MAS).
    • In LPAR1 there are zAlert + SMTP started tasks active.
    • In LPAR2 there is only zAlert active.
    The question is : can I use the same SMTP  started task for both systems?

    In other words, zAlert on LPAR2  captures a security event and sends the output to the local JES2 node.
    This output is stored on the SPOOL shared with LPAR1 because of MAS configuration. 

    Can the SMTP server (LPAR1) read the output previously generated by zAlert (LPAR2) in order to send the email ?

    My doubt is: do I need to setup an SMTP task on both the systems or can it work fine only with one SMTP  task ? Do you have any suggestions ?   
    Thank you in advance

    ------------------------------
    Luigi Perrone
    ------------------------------


  • 2.  RE: zAlert: using SMTP node in a MAS environment

    Posted 04/02/20 09:45 AM
    As far as I know, there's no need for a second SMTP server.
    As long as you have the correct SMTP settings configured in option Setup Output (SE.7)

    Regards, Tom Zeehandelaar

    ------------------------------
    Tom Zeehandelaar
    z/OS Security Enablement Specialist - zSecure developer
    IBM
    Delft
    +31643351728
    ------------------------------



  • 3.  RE: zAlert: using SMTP node in a MAS environment

    Posted 04/02/20 09:55 AM
    Yes Tom, you are right.  I forgot to tell you that both zAlert started tasks share the same configuration. Maybe,  is it wrong ?  In which dataset are stored the SMTP parameters ?.
    Tks

    ------------------------------
    Luigi Perrone
    ------------------------------

    Original Message


  • 4.  RE: zAlert: using SMTP node in a MAS environment

    Posted 04/02/20 10:11 AM
    The effective SMTP parameters are generated into a CARLa ALLOC command that is stored at the beginning of the main (reporting) CARLa member:
    OPTION smtpnjenode=JESN1234 smtpclass=B smtpwriter=SMTP smtpatsign=@
    These values are set from SE.A.A using an E line command in front of the alert set name.  They are stored in an ISPF table in C2PCUST.

    If you have a MAS, you should specify the shared spool node name.  If you have NJE connections, you should specify the node name of the LPAR that runs the SMTP started task.  Once the spool file arrives in the final node, SMTP searches for files with writer id SMTP (or whatever you coded in the SMTP config), so this is the value you should include in the SMTPWRITE parameter.

    ------------------------------
    Rob van Hoboken
    ------------------------------

    Original Message


Related Content