Volume 12, Number 11 -- April 24, 2012

Enforcive Delivers Better SQL Monitoring for IBM i

Published: April 24, 2012

by Alex Woodie

Enforcive (formerly Bsafe Information Systems) last week unveiled a new release of its IBM i security suite, called Enforcive/Enterprise Security. With version 7.2, the company delivered support for monitoring interactive SQL queries in real time, providing a way to monitor the execution of both written and embedded SQL statements. This release also brings enhancements to file integrity monitoring, auditing, and alerting features of the suite.

Enforcive has helped IBM i customers keep an eye on SQL for some time. The company's SQL monitor looks for SQL activity, including interactive SQL statements submitted by users and statements embedded in RPG, DRDA, DDM, and ODBC programs. These statements are logged in the Enforcive database for later review by the administrator or auditor.

With version 7.2, Enforcive has widened its SQL monitoring features to give customers the capability to monitor all invocations of SQL requests, regardless of how they were called. Customers can identify the SQL statements invoked when imbedded in high level languages or via QSHELL, which will aid them in understanding the routes taken to access their databases and as a result better prepare them to protect their data, the company says.

Enforcive allows managers to specify exactly which kind of internal SQL activity they want to log. They can configure their SQL monitors by various criteria, including name, job number, user, files, and type of request, such as those coming in via TCP/IP only or only those submitted via 5250.

The new features allow a company to generate a clear picture of who is gaining access to the database, where they're accessing it from, and what the user is doing with the files, Enforcive says. The SQL capabilities can be accessed through Enforcive's GUI, which will make them easier to use.

Enforcive CEO Shimon Bouganim says the new tools will help customers keep an eye on IBM i activity. "Lately we have been receiving more and more inquiries regarding monitoring of interactive SQL and we believe that this enhanced module is well positioned to address those requirements," Bouganim says in a press release.

Enforcive/Enterprise Security version 7.2 also delivers enhancements to the DB2/400 monitoring feature. The company says it can detect, alert on, and prevent all types of database connections, including read-only access, data modification, and privileged operations.

The Alert Center has also been enhanced with this release. Enforcive says that any attempts to make field-level changes to DB2/400 files will now generate an alert. The product can also generate a report based on message queue activity.

The suite's Policy Compliance Manager component has a new file integrity check feature that enables security personnel to check the "fingerprint" of objects and IFS files at regular time intervals in order to determine if changes have been made to the structure of the object or file. Enforcive says this gives organizations a quick detection method for file tampering or corruption.

Another useful new security feature is the capability to monitor non-IBM commands, such as those that an organization has written itself. In addition to monitoring for these commands (which aren't located in the QSYS library), the Enforcive software can prevent the commands from being executed.

Last but not least, the suite's Cross Platform Audit component has been enhanced with support for Oracle database. Enforcive says customers can track SQL statements and field-level changes made to the Oracle database without the need for an agent to be installed on the Oracle system. Cross Platform Audit also supports DB2 databases from IBM and the SQL Server database from Microsoft.


Bsafe Changes Name to Enforcive, Updates IBM i Security Suite

Bsafe Launches Compliance Software for PCI

Bsafe Launches New i/OS Security Tools

Bsafe Adds AIX Support to Auditing and SIEM Product

Ex-IBM Exec Takes Over as Bsafe CEO

Bsafe Updates Security Tools for i OS

Putting the 'i' Back Into PCI

Bsafe Launches Security Policy Compliance Manager

Bsafe Introduces Cross-Platform Auditing

Bsafe Addresses HIPAA with Field Masking for i5/OS Apps

                     Post this story to del.icio.us
               Post this story to Digg
    Post this story to Slashdot

Sponsored By

Deliver vital reports, checks, forms and
scanned docs faster and cheaper!

                                      inFORM's iDocs & iScan solutions eliminate paper costs
                                      from AP, customer service, sales & more. Fast ROI!

                                          Scan docs plus generate electronic forms, checks, etc
                                           directly from IBM i spool files
                                          Intelligently route documents via email, fax, printer
                                          Provide secure browser-based access to docs from
                                           anywhere in the world, 24x7

Go paperless!
SAVE with inFORM document management solutions.

Follow this link for the iScan VIDEO DEMO & iDocs white papers >>

Editor: Alex Woodie
Contributing Editors: Dan Burger, Timothy Prickett Morgan
Publisher and Advertising Director: Jenny Thomas
Advertising Sales Representative: Kim Reed
Contact the Editors: To contact anyone on the IT Jungle Team
Go to our contacts page and send us a message.

Sponsored Links

SEQUEL Software:  FREE webinar: Application Development Control Starts with the Right Tools. April 26
ASNA:  FREE one-day ASNA Wings® workshops: Las Vegas, Feb 24; Dallas, May 10; Malvern, May 24
COMMON:  Join us at the 2012 Conference & Expo, May 6 - 9 in Anaheim, CA


IT Jungle Store Top Book Picks

BACK IN STOCK: Easy Steps to Internet Programming for System i: List Price, $49.95

The iSeries Express Web Implementer's Guide: List Price, $49.95
The iSeries Pocket Database Guide: List Price, $59
The iSeries Pocket SQL Guide: List Price, $59
The iSeries Pocket WebFacing Primer: List Price, $39
Migrating to WebSphere Express for iSeries: List Price, $49
Getting Started with WebSphere Express for iSeries: List Price, $49
The All-Everything Operating System: List Price, $35
The Best Joomla! Tutorial Ever!: List Price, $19.95

The Four Hundred
AWS/400: Amazon Builds An AS/400-oid Cloud

IBM Loses Money On Hardware In Q1

Summit Partners Acquires Control Of Help/Systems--Again

Mad Dog 21/21: Drivers Of The Purple Sage

Third Party's A Charm For JDE Maintenance Contracts

Four Hundred Guru
A Philosophically Engineered Approach to the Processing of Parameters

Have Your Cake and Eat It, Too

Admin Alert: Planning An i 6.1 Upgrade

Four Hundred Monitor
Four Hundred Monitor's
Full iSeries Events Calendar

System i PTF Guide
April 21, 2012: Volume 14, Number 16

April 14, 2012: Volume 14, Number 15

April 7, 2012: Volume 14, Number 14

March 24, 2012: Volume 14, Number 12

March 17, 2012: Volume 14, Number 11

March 10, 2012: Volume 14, Number 10

TPM at The Register
Mellanox rides the Xeon E5 wave

AMD bleeds red in Q1 after GlobalFoundries deal rejig

Amazon throws open doors to AWS apps marketplace

Cray taps Microsoft parallel guru as CTO

Amazon to all data centers: Keep up, if you can

Cycle fires up 50,000-core HPC cluster on Amazon EC2

Intel: Chinese server market second only to US

VMware still shines in a Facebook world

Morphlabs forges OpenStack cloud rack

IBM turns in profits bump despite server slump

SoftLayer tailors HPC clouds with GPU lining

Toshiba gobbles IBM's POS biz for $850m


T.L. Ashford
Micro Focus
Abacus Solutions
inFORM Decisions
Tembo Application Generation

Printer Friendly Version

A 'New' Infor Proclaims Need for Speed

Oracle Revs JDE EnterpriseOne and World

Why You Need a Data Warehouse

Enforcive Delivers Better SQL Monitoring for IBM i

Kisco Locks Down IBM i Security Tool

News Briefs and Product Shorts:

Databeam Adds Security Component to Suite . . . STORServer Launches Entry-Level Backup Appliance . . . Key Info Wins Award for IBM i Video . . . Lavastorm Signs On as QlikTech Partner . . . Kronos Takes iSeries Central on the Road, Gets SMART . . .

Four Hundred Stuff


Subscription Information:
You can unsubscribe, change your email address, or sign up for any of IT Jungle's free e-newsletters through our Web site at http://www.itjungle.com/sub/subscribe.html.

Copyright © 1996-2012 Guild Companies, Inc. All Rights Reserved.
Guild Companies, Inc., 50 Park Terrace East, Suite 8F, New York, NY 10034

Privacy Statement