IBM Security Z Security

 View Only

IBM Security zSecure Administration, Auditing, and Compliance solutions

By Jeroen Tiggelman posted Sun December 01, 2019 12:11 PM


imageIBM Security zSecure suite solution packages

IBM Security zSecure suite helps protect your mainframe. It provides cost-effective security administration, improves service by detecting threats, and reduces risk with automated audit and compliance reporting.

Besides the separate product offerings, there are three solution packages available for ordering that combine the functionality of several components.

IBM Security zSecure Administration (5655-N23) contains :
IBM Security zSecure Admin (5655-N16)
IBM Security zSecure Visual  (5655-N20)

IBM Security zSecure Compliance and Auditing (5655-N24) contains:
IBM Security zSecure Audit (5655-N17)
IBM Security zSecure Alert (5655-N21)
IBM Security zSecure Command Verifier (5655-N19)

IBM Security zSecure Compliance and Administration (5655-N25) contains:
IBM Security zSecure Admin (5655-N16)
IBM Security zSecure Visual (5655-N20)
IBM Security zSecure Audit (5655-N17)
IBM Security zSecure Alert (5655-N21)
IBM Security zSecure Command Verifier (5655-N19)

Edit: There is now also a product IBM Z Security and Compliance Center (5655-CC1), which is not a part of zSecure suite, but which provides a super-set of the functionality of zSecure Audit. There are furthermore solution packages IBM Z Compliance and Auditing (5655-N34) and IBM Z Compliance, Auditing, and Administration (5655-N35), which mirror the last two solution packages above but with that product instead of zSecure Audit. See this announcement.

IBM Security zSecure suite structure

The solution packages cover all the components that are installed directly onto z/OS.
The simple pictorial view of the overall zSecure suite structure is the following:

zSecure for z/OS consists of
     installed directly onto z/OS:
        5655-N25 IBM Security zSecure Compliance and Administration, which consists of
            5655-N23 IBM Security zSecure Administration, which consists of
                5655-N16 IBM Security zSecure Admin 
                5655-N20 IBM Security zSecure Visual
            5655-N24 IBM Security zSecure Compliance and Auditing, which consists of
                5655-N17 IBM Security zSecure Audit
                     a subset of the zSecure Audit functionality is contained in 5655-AD8 IBM Security zSecure Adapters for SIEM
                5655-N21 IBM Security zSecure Alert
                5655-N19 IBM Security zSecure Command Verifier
     installed onto the CICS platform
        5655-N18 IBM Security zSecure CICS Toolkit
zSecure for z/VM consists of
    5655-RAC IBM Security zSecure Manager for RACF z/VM
The bold product identifier numbers (PIDs) designate individual product offerings. The solutions each consist of a number of these.

IBM Security zSecure suite integration

Regardless of how you order them, the five products that are part of 5655-N25 are strongly integrated.

For example, zSecure Admin, zSecure Audit, zSecure Alert, and zSecure Visual share one ISPF user interface.
When starting that UI, it will indicate what functions are available by referring to the appropriate bold PIDs.
The solution PIDs are used for ordering, but are not referenced by the software or the individual product books.
The solutions do come with their own Program Directories for ease of installation.
These solutions originally became available on June 1, 2012. You can read the US announcement letter here.

Note on sub-capacity pricing

When sub-capacity pricing applies, most of the zSecure products that run on z/OS are subject to z/OS-based sub-capacity charges. There are two exceptions: IBM Security zSecure CICS Toolkit and IBM Security zSecure Alert have Execution-based sub-capacity charges.

Note: If IBM Security zSecure Alert (5655-N21) is ordered as a separate product, then sub-capacity charges are Execution-based. If IBM Security zSecure Alert is ordered as one of the components of the IBM Security zSecure Compliance and Auditing (5655-N24) solution or the IBM Security zSecure Compliance and Administration (5655-N25) solution, then it will have z/OS-based sub-capacity charges.

Edit: Changed the z/VM PID from 5655-T13 (V1) to 5655-RAC (V2)