System i Software

Action

Action's a powerful security solution that intercepts security breaches and other events in real-time and immediately takes appropriate corrective action. Actions may include sending alert messages to key personnel and/or running command scripts or programs that take corrective steps.

The Action Solution

In today's business environment, it is no longer sufficient to discover a security problem after it occurs. Traditional audit software provides useful historical data after the fact. This is the digital equivalent of closing the barn door after the horses have escaped.

Action provides a comprehensive, easy-to-use solution. For example, if a user attempts to copy a critical file, Action sends a SMS message to the security officer's mobile phone and automatically signs off and disables the offending user. Scripts can even initiate actions that take place if an appropriate response does not occur within a specified period of time!

Action real-time detection constantly monitors the system for a wide variety of security and other system events, including:

• Events detected by Audit real-time auditing
• Terminal screens locked/released and jobs terminated by Screen
• Active job status and checking for jobs that are not active

It is amazingly easy to define rules and actions with the Rule Wizard feature. Rules trigger actions and alerts based on one or more parameters associated with a particular event. Examples of selection parameters include user, date, time, job, workstation, library, object name, IP address, command, job name, etc. Rule criteria use many different operators such as: equal/not equal, greater than/less than, like/not like, "contained in list", "Starts with", etc. No other security alert/action system offers such power and flexibility.

Action also includes a number of other security features, such as automatic disabling of inactive users, restricting user access during planned absences and control over creating and running programs that use adopted authority.

Key Features

• Alert messages sent by e-mail, SMS, pager, network or message queue
• Automatically take corrective action by running command scripts or programs
• Rule Wizard makes definition process simple for non-technical users
• Rules can use many different selection criteria types
• Built-in command script interpreter with replacement variable support
• Responds to current system status parameters and active jobs
• Restrict user access during vacations, holidays and other planned absences
• Automatically disables inactive user profiles
• Tight control over authority adoption

Benefits

• Specially designed for non-technical users such as auditors, managers and administrators
• Alerts keep security officers and administrators informed about security breaches in real-time - before it's too late
• Automatic corrective actions minimize damage from security breaches and prevent recurrence
• You determine exactly what will happen, when it will happen, and under what conditions
• User access control features ensure that authorized users have access to the system only at appropriate times
• Adopted authority control prevents users from bypassing system security
• Superior human engineering ensures security implementation quickly, efficiently, and without expensive security consultants