IBM Security for Z

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

IBM Security zSecure Administration, Auditing, and Compliance solutions

By Jeroen Tiggelman posted Sun December 01, 2019 12:11 PM

  

imageIBM zSecure portfolio solution packages

IBM zSecure helps protect your mainframe. It provides cost-effective security administration, improves service by detecting threats, and reduces risk with automated audit and compliance reporting.

Besides the separate product offerings, there are solution packages available for ordering that combine the functionality of several components.

IBM Security zSecure Administration (5655-ABH) contains :
IBM Security zSecure Admin (5655-ABB)
IBM Security zSecure Visual  (5655-ABF)
Edit: This package only exists at the 3.1 level.

IBM zSecure Compliance and Auditing (5655-ABI) contains:
IBM zSecure Audit (5655-ABC)
IBM zSecure Alert (5655-ABG)
IBM zSecure Command Verifier (5655-ABE)

IBM zSecure Compliance and Administration (5655-ABJ) contains:
IBM zSecure Admin (5655-ABB)
IBM Security zSecure Visual (5655-ABF) - Edit: this is only a part at the 3.1 release level
IBM zSecure Audit (5655-ABC)
IBM zSecure Alert (5655-ABG) 
IBM zSecure Command Verifier (5655-ABE)

Edit: There is now also a product IBM Z Security and Compliance Center (5655-CC1), which is not a part of the zSecure portfolio, but which provides a super-set of the functionality of zSecure Audit. There are furthermore solution packages IBM Z Compliance and Auditing (5655-ABK) and IBM Z Compliance, Auditing and Administration (5655-ABL), which mirror the last two solution packages above but with that product instead of zSecure Audit. See this announcement.

The new IBM zSecure Compliance (5655-MCC) product is a super-set of the functionality of Z Security and Compliance Center. It is not currently associated with any solution packages.

IBM zSecure portfolio structure

The solution packages cover all the components that are installed directly onto z/OS.
The simple pictorial view of the overall zSecure suite structure is the following:

zSecure for z/OS consists of

     installed directly onto z/OS:
        5655-ABJ IBM zSecure Compliance and Administration, which consists of
            5655-ABH IBM Security zSecure Administration (the last release was 3.1), which consists of
                5655-ABB IBM zSecure Admin 
                5655-ABF IBM Security zSecure Visual   (the last release was 3.1)
            5655-ABI IBM zSecure Compliance and Auditing, which consists of
                5655-ABC IBM zSecure Audit
                     a subset of the zSecure Audit functionality is contained in 5655-ABA IBM zSecure Adapters for SIEM
                5655-ABG IBM zSecure Alert
                5655-ABE IBM zSecure Command Verifier
        5655-MCC IBM zSecure Compliance
                    a super-set of zSecure Audit functionality
     installed onto the CICS platform
        5655-ABD IBM zSecure CICS Toolkit
 
zSecure for z/VM consists of
    5655-RAC IBM Security zSecure Manager for RACF z/VM
 
The bold product identifier numbers (PIDs) designate individual product offerings. The solutions each consist of a number of these.



IBM zSecure portfolio integration

Regardless of how you order them, the products that are part of 5655-ABJ are strongly integrated, also with 5655-MCC.

For example, zSecure Admin, zSecure Audit, zSecure Alert, and zSecure Compliance share one ISPF user interface.
When starting that UI, it will indicate what functions are available by referring to the appropriate bold PIDs.
 
The solution PIDs are used for ordering, but are not referenced by the software or the individual product books.
The solutions do come with their own Program Directories for ease of installation.
 
The solution packages originally became available on June 1, 2012. You can read the US announcement letter here.

Note on sub-capacity pricing

When sub-capacity pricing applies, most of the zSecure products that run on z/OS are subject to z/OS-based sub-capacity charges. There are two exceptions: IBM zSecure CICS Toolkit and IBM zSecure Alert have Execution-based sub-capacity charges.

Note: If IBM zSecure Alert (5655-ABG) is ordered as a separate product, then sub-capacity charges are Execution-based. If IBM zSecure Alert is ordered as one of the components of the IBM zSecure Compliance and Auditing (5655-ABI), IBM zSecure Compliance and Administration (5655-ABJ), IBM Z Compliance and Auditing (5655-ABK), or IBM Z Compliance, Administration and Auditing (5655-ABL) solutions, then it will have z/OS-based sub-capacity charges.


Edit: Changed the z/VM PID from 5655-T13 (V1) to 5655-RAC (V2)

Edit: 
Changed all z/OS PIDs from V2 to V3. The V2 PIDs were:

zSecure for z/OS consists of

     installed directly onto z/OS:
        5655-N25 IBM Security zSecure Compliance and Administration, which consists of
            5655-N23 IBM Security zSecure Administration, which consists of
                5655-N16 IBM Security zSecure Admin 
                5655-N20 IBM Security zSecure Visual
            5655-N24 IBM Security zSecure Compliance and Auditing, which consists of
                5655-N17 IBM Security zSecure Audit
                     a subset of the zSecure Audit functionality is contained in 5655-AD8 IBM Security zSecure Adapters for SIEM
                5655-N21 IBM Security zSecure Alert
                5655-N19 IBM Security zSecure Command Verifier
     installed onto the CICS platform
        5655-N18 IBM Security zSecure CICS Toolkit

And changed 5655-N34 to 5655-ABK and 5655-N35 to 5655-ABL

Edit: Added information on zSecure Compliance, removed "Security" from most of the product names, and changed "suite" to "portfolio".
0 comments
230 views

Permalink