Vanguard Security Solutions are security tools targeted to the security administration of IBM mainframes. The individual tools in the collection can be implemented separately or in combination; some enhance (and require) the IBM Security Server itself and others can be operated independently or in concert with IBM Security Server.

Among other things, the available modules allow for the general administration of mainframe security measures, cross-platform password management, security auditing and analysis, and compliance issues. Key modules in the suite include:

- Administrator: Simplifies/enhances security management functions on IBM Security Server (RACF). Operates in either interactive or batch processing modes and provides automated features including password administration, decentralized administration support, authority analysis, DB2 authority reporting and data services.

- Advisor: Provides security event analysis, detection, notification, and reporting via collection of log data and info from Security Server. Continuous event monitoring and automated alerting are also supported.

- Analyzer: z/OS operating system and security assessment, risk identification, and threat analysis along with remedy recommendations.

- Enforcer: Continuous monitoring/enforcement software ensures compliance to organizational standards.

- PasswordReset: Allows authorized users to reset forgotten RACF passwords using their Web browsers (encrypted transactions).

- SecurityCenter: Windows (2000/XP/2003) GUI for IBM Security Server and DB2 security administration.

- INCompliance: Performs Web-based, on-demand or continuous compliance checks (SOX, HIPAA, other) of the RACF environment, with remediation recommendation. Includes a step-by-step RACF Web-based guideline.

- ez/SignOn: Single sign-on software allows users to access systems on multiple platforms (Windows NT/2000, AS/400, Red Hat Linux, SUSE Linux, HP, Solaris, AIX) using a single login name/id. Two modes of operation are supported: A synchronization mode, in which password changes are automatically synchronized across systems; and an Intrusion Detection mode, in which authentication requests to individual platforms are intercepted and redirected to the mainframe. Intrusion management techniques are then employed to detect individuals who attempt to directly access the individual systems (this latter intrusion detection mode is the one recommended by the vendor).

- ez/Integrator: API provides developers with the ability to utilize RACF authentication within their applications.

- ez/AccessControl: Enables the routing of all requests for access to a drive, file, or directory on a Windows 2000 or 2003 platform through IBM Security Server.

- ez/Token: Integrates two-factor (RSA SecurID/ActivIdentity) authentication with RACF. ez/Token replaces the user's standard password with one-time passwords generated by a hardware token (can be combined with a PIN); new passwords are generated randomly every 60 seconds.

- Registration Manager: User ID level reporting and tools for the management of ez/Signon mapped profiles.

- Authenticator: A z/OS Security Server front-end appliance (also available as software for Windows Server) that provides single-sign-on capabilities for multiple (the vendor notes support for hundreds) devices; I.E., the appliance intercepts all incoming authentication requests and performs them against z/OS Security Server.

- Tokenless Authentication: One-time password support by way of the user's existing PDA or handheld; I.E., when the user logs in with their password a OTP is sent to their cellphone, PDA, etc. enabling them to complete the login.

- Policy Manager: The newest entry in the product family. Policy Manager allows for the definition and enforcement of policies governing which users are able to issue which RACF commands. Command/user combinations that do not comply with the policies are blocked; even if the user would otherwise have access to execute the command in RACF.

Vanguard Security Solutions are available now. Visit the vendor's Web site for further information.