Raz-Lee Security, a leading supplier of information security solutions for IBM Power i servers (iSeries/AS/400), has enhanced iSecurity AP-Journal with an Eclipse-based GUI environment. This makes Application Security easier than ever to implement and use.

AP-Journal keeps managers closely informed of all changes in their valuable information assets and streamlines IBM i journaling procedures. AP-Journal’s standard features include: 

• Addressing PCI, SOX, HIPAA, etc. requirements for closely monitoring and raising alerts when application data changes
• Long-term storage of sensitive business information, independent of journal receiver lifecycle to adhere to storage limits
• Output as e-mailed CSV, HTML, PDF attachments, Outfile, Print or within GUI
• READ operations selectively added to OS/400 Journal Receivers, complying with PCI requirements for accessing sensitive data
• Timeline & cross-application reports based upon user-defined business items
• Real time Syslog, SNMP and Twitter alerts, in addition to alerts sent as e-mails, SMS messages, operator messages, etc.
• “Mass” uploading of data base update information directly to SIEM systems via Syslog without I/O overhead of writing to disk

The new GUI support in AP-Journal includes:

• Defining applications, including:
  • Journaled files
  • Business items which are common fields appearing in multiple files
  • Filtering rules for long term retention of selected data fields
  • Defining alerts based upon pre-determined field-level thresholds and activities
• Reporting on application changes, including “before” and “after” data images based on:
  • OS/400 journal receivers
  • Special purpose journal containers which contain long term, application-specific information
• Using the unique business intelligence interface, Visualizer, to:
  • View summary data based on any application or journal header field
  • Isolate the desired population instantaneously
  • Accessing the detailed data corresponding to the desired population

“Our AP-Journal product has proved to be an ongoing success, and has been selling successfully worldwide for several years,” said Eli Spitz, VP Business Development, Raz-Lee Security. “In fact, AP-Journal’s success was instrumental in bringing about the recent press focus on IBM i Application Security, in addition to “traditional” infrastructure security aspects like network access, QAUDJRN monitoring and reporting, and user profile auditing”.

Cont.

AP-Journal had a significant impact at Toyota Boshoku America which attained JSOX compliance by providing reports on changes in application files. Another especially interesting implementation of AP-Journal was at Promedico which included

• Preventing undue blockage of customer orders on account of credit limitations
• Checking the validity of updates to pharmaceutical product’s expiration dates

Accelerating the supply process

This case study/product review offers the the point of view of Promedico, a large Israeli pharmaceuticals company, on iSecurity AP-Journal - the applications it is used for and how it makes business more efficient.

Click here to view.

We’re back from Common, the annual “meeting of the minds” for Power i experts, and would like to share our impressions.

One obvious aspect was the mark of the recession – fewer people, but a lot more professionals. Only the real Power i experts attended – which was actually good in a way, since we held more to-the-point discussions with people about essential issues.

We had an enlightening meeting with leading IBM executives (at 06:45 AM… and totally jetlagged), at which Power i was hailed as one of the more successful IBM platforms.

In this meeting, we had a fascinating discussion about the future directions of Power i. I offered my own vision: the creation of an integrated GUI, however basic, to be used by Power i staff.

Also in this meeting, IBM executives described their innovative cooperation with the University of Nebraska-Lincoln, Iowa State University, and Wright State University, in which students will be taught core concepts based on IBM’s Power Systems and IBM i infrastructure. This is an admirable venture which could do much to expose IT pros to Power i and promote it. I would even be happy to take part in this project myself, and I hope it expands to other countries.

We had some very productive meetings – including sessions with Jeff Uehling, IBM System i Executive, with our US business partners – SEA and Innovatum, as well as with Linda Harty, System i Network’s Executive Editor, and  Alex Woodie, IT Jungle’s Senior Editor.

There was a lot of interest in our booth and iSecurity product portfolio. Many customers stopped by our booth and described how they use our products. Our new Compliance Evaluator generated a lot of interest, and AP-Journal drew instant enthusiasm. A lot of customers asked about PCI compliance – which is a main concern for our customers.

In addition, I gave a presentation on “Tracking Application Activity via the DB-Journal: the Missing Dimension of Information Systems”, which discussed what DB-Journal offers and what it lacks, and how products like iSecurity AP-Journal cover users’ needs. The presentation was well-attended and sparked some interesting discussions.  Feel free to contact me for more info on this.

Written by Shmuel Zailer, CEO, Raz-Lee Security
Email Shmuel Zailer at marketing@razlee.com