IMS tools, DB2 tools, Compliance Software, Data Retention

• All database activity is monitored and tracked, including access to sensitive data and unauthorized changes by privileged users.
• Performance impact is minimal because all storage, analysis and reporting of database activity information is efficiently performed off-mainframe, using a high-performance, Linux-based appliance.
• Database activity is monitored in real-time, immediately identifying anomalous behavior and violations to corporate policies and allowing for preventive actions via security alerts and other policy-based actions.

• Z-TAP™, a low-impact monitoring service for z/OS developed by NEON, which resides on the mainframe and tracks all database activities at the database level itself. For example, the service tracks all DB2 queries executed by a CICS application or all database changes implemented by DBAs. Performance impact is minimal because all analysis is performed off-mainframe and the service does not rely on internal DBMS utilities. To further minimize costs, which are tied to MIPS consumed by central processors, the Z-TAP offloads processing to IBM’s specialty co-processors called zIIPs (z Integrated Information Processors).
  
  
• Z2000, a high-performance, Linux-based appliance developed by Guardium for efficient, off-mainframe analysis and storage of massive amounts of mainframe audit data. The appliance provides sufficient self-contained capacity for online storage of up to 2-4 billion database transactions, as well as an integrated interface to IBM Tivoli Storage Manager (TSM), EMC Centera and other systems for periodic archiving of audit data in encrypted format.
  
  
• The Guardium Security Suite, an integrated family of intuitive, Web-based security and compliance monitoring applications that run on the appliance itself. The suite has continually been refined over the past five years based on ongoing feedback from Big 4 auditors and blue-chip Global 1000 customers worldwide. For example, it includes applications for defining granular access policies, creating baselines to rapidly identify anomalous behavior and common attacks such as SQL injection, correlating unauthorized activities and policy violations, automating compliance reporting and oversight workflows, tracking and managing incidents, and forensic analysis.
  
  
• Guardium Enterprise Manager, which provides centralized, cross-platform management of database security policies and a single enterprise-wide view and repository of database audit data – aggregated and normalized across heterogeneous DBMS platforms. With Enterprise Manager and Guardium’s multi-tier architecture, customers can easily scale up to meet the most demanding environments, simply by adding appliances that automatically work together in a federated model, even across multiple data center locations and mixed mainframe and open systems environments.
  
  For UNIX, Linux and Windows, Guardium supports all major DBMS platforms – including IBM DB2 and Informix, Oracle, Microsoft SQL Server, and Sybase ASE and IQ – with its family of S-TAP™ monitoring probes and G2000 appliances. Guardium Enterprise Manager allows customers to easily combine these with Z-TAPs and Z2000 appliances in a single unified solution for heterogeneous environments.