Raz-Lee Repackages i5/OS Security Software

January 15, 2008 Alex Woodie

Raz-Lee Security has re-jiggered the packaging of its collection of i5/OS security products into two main suites, the vendor disclosed recently. System i shops looking to clamp down on their server’s exposure to network-based threats will be pointed to the new Prevention Package, while Raz-Lee will sell the Compliance Package to customers needing to prove compliance with SOX, HIPAA, PCI, and other government and industry regulations.

Over the years, Raz-Lee, which is headquartered in Israel and has U.S. headquarters outside of New York City, has put together a comprehensive collection of more than a dozen i5/OS security modules that address a wide spectrum of security, auditing, and management needs.

The individual products that make up Raz-Lee’s all-inclusive iSecurity suite include:

Firewall, the core network security product that locks down i5/OS exit points
Antivirus, an i5/OS implementation of the open source ClamAV software
Screen, which turns off unused terminal emulators
Password, a password enforcement solution
Audit, a real-time security event notification system with 300 built-in reports
Action, an automated attendant that works with Firewall and Audit
Capture, which tracks and replays users’ screen activity
View, a field-level obfuscation tool
FileScope, the query and reporting component
Journal, which documents changes made to data
User Profile Manager, which manages i5/OS user profiles
Authority On Demand; which cuts down on the need for high-level user profile authorities
Visualizer a data warehousing tool for analyzing information collected by other iSecurity products
Assessment, an i5/OS security setting test tool

Surrounding this core group of modules are a Java-based graphical management console; the Central Control component that can be used to manage iSecurity components on multiple servers; and System Control, which helps manage i5/OS settings on multiple servers.

About a week ago, Raz-Lee announced it was dividing its iSecurity products into the Prevention and Compliance packages, which address the two main security requirements of System i shops today. At the same time, the company will continue to use the iSecurity product name, and sell its products separately to customers who would prefer to purchase them that way.

The new Prevention Package will include all the iSecurity products related to clamping down the most egregious security holes threatening System i environments on a day-to-day basis. This package will include the Firewall, Antivirus, User Profile Manager, Password, Screen, and Assessment modules.

The new Compliance Package will be focused not so much on real-time security, but on documenting the steps organizations have taken to implement processes fulfilling the latest government and industry regulations. As such, the Compliance Package will include the Audit, Action, Journal, FileScope, and Assessment components.

There are also some iSecurity components that will be common to both packages, including: the Java management console; the Visualizer data warehouse, which is useful for analyzing network and audit journal data for single- and multi-system environments; and Central Control, which manages remote servers from one location. The Capture, View, Authority on Demand, and System Control products will be sold separately.

The new packaging re-aligns Raz-Lee’s software with customer needs, says Shmuel Zailer, Raz-Lee CEO. “This announcement, based upon feedback received from customers and business partners alike, will simplify iSecurity’s go-to-market stance,” he says. “Package pricing has been adjusted in order to ensure a win-win situation for customers and Raz-Lee alike.”

Customers will save from 20 to 30 percent when they buy the Prevention or Compliance packages compared to buying the individual products separately, according to Eli Spitz, vice president of business development.

“People like to keep things simple. You’ve got to keep it short,” Spitz says. “You don’t want seven different products flying around. You want one line item saying ‘Compliance Package, iSecurity.’ It’s one line item, and it costs ‘X.’ That’s one reason [for the re-packaging]. The other is to give it a discount.”

The Prevention and Compliance packages are available now. Pricing for the Prevention Package ranges from $8,000 to $32,000 per server, while the Compliance Package costs between $10,000 and $37,000; prices are tier-based. For more information, visit www.razlee.com.