IBM Security Z Security

IBM Security zSecure compatibility for CICS 5.6

By Jeroen Tiggelman posted Fri August 07, 2020 07:53 AM

  
IBM CICS Transaction Server for z/OS V5.6 was announced on April 7, 2020, with a planned availability date of June 12, 2020. Toleration fixes for zSecure 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.3.0, 2.3.1, and 2.4.0 are available.


Background

IBM Security zSecure can detect security settings for CICS regions and report on CICS transactions and programs, and can process CICS security events. ISPF menu option RE.C displays information about CICS regions (zSecure Admin, zSecure Audit)  and about CICS transactions and CICS programs (zSecure Audit only). CICS SMF records are processed in zSecure Audit, zSecure Alert, and zSecure Adapters for SIEM; the enriched events can be sent to a Security Information and Event Management (SIEM) solution, such as IBM QRadar SIEM.

The common query language employed by zSecure Admin, zSecure Audit, zSecure Manager for RACF z/VM, zSecure Alert, and zSecure Adapters for QRadar SIEM is called the CARLa Auditing and Reporting Language (CARLa).

zSecure CICS Toolkit provides a toolkit and an administrator interface to administer RACF from a CICS environment.

 
Benefits

Toleration support for CICS Transaction Server V5R6, without which CICS information might be missing or unrecognized.


Prerequisites

To fully benefit from these enhancements the following is required:
* IBM Security zSecure 2.1 (or later), or one of the zSecure Compliance, Administration, and Auditing solutions
* The relevant PTF for APAR OA59968 (zSecure Admin/Audit/Adapters) depending on your release: UJ03593 (2.1.0), UJ03594 (2.1.1), UJ03602 (2.2.0) , UJ03603 (2.2.1), UJ03607 (2.3.0), UJ03608 (2.3.1), or UJ03611 (2.4.0).

zSecure CICS Toolkit does not require any updates.


Migration

You can apply this fix without special considerations.

For 2.4.0, UJ03611 will pull in the MQ auditing, Command Audit Trail, compliance automation, etc. service stream enhancement. See there for considerations.


If you have any questions, please post them here or on the zSecure support forum. The IBM Security zSecure today article serves as a starting point to reach all the latest zSecure announcements.
0 comments
13 views

Permalink