Using Network Configuration Assistant to configure zERT Policy Enforcement

With z/OS V2.5, z/OS Communications Server brings zERT policy-based enforcement. Policy-based rules built in the Network Configuration Assistant (NCA）describe acceptable or unacceptable levels of cryptographic protection along with the actions to take when TCP connections match those rules.

This presentation slide is a deep dive on using Network Configuration Assistant (NCA) to configure zERT rules. It includes:

• Introduction to zERT  Policy Enforcement and NCA
• zERT policy rules and object structure
• Creating basic zERT objects in NCA
• Creating zERT rules in NCA
• Creating zERT rule sets in NCA
• Associating zERT rule sets to stacks in NCA and generating configuration
• NCA reports to analyze your zERT configuration