Defender Mainframe Edition
Two-factor authentication for mainframe
Achieve two-factor authentication (2FA) for your entire IBM System z mainframe network – or single business transactions – with Defender Mainframe Edition (ME). It enhances security by enabling your organization to authenticate users at three levels: application selection, business transaction or network entry. Defender ME incorporates the latest cryptographic hardware technologies and supports the most widely used password tokens.
Features
Network security
Validate users before they enter the network by extending security defenses from the kernel of the individual mainframe systems to the network periphery.
Application/transaction protection
Restrict user access to permitted applications only by using their ID and passwords to log in. And for higher level access, you can require that users provide additional personal token information, such as two-factor authentication (2FA), at the transaction level, the application level or both.
OATH-compliant
Select a solution that fits your organization’s needs with support for any OATH-compliant token (from any OATH-compliant hardware vendor).
RSA SecureID support
Provides security and reliability, while controlling costs, with support for the RSA SecureID AES token with nine-digit serial numbers and for 128-bit AES tokens. Plus, save hassle for your users with AES tokens as they no longer will need to connect to a RSA ACE®, UNIX or Windows server to be authenticated.
Alerts
Accelerates message warnings (including NewView alerts) to a central host or operator console.
MVS system support
Supports Multiple Virtual Storage (MVS) systems with Defender’s three levels:
- Defender ME VSSE – Controls which LU-to-LU sessions will be allowed or denied by VTAM, including application-to-printer, peer-to-peer, terminal-to-application and Network Job Entry (NJE) sessions.
- Defender ME Secure – Restricts your users to permitted applications only, providing your organization with information protection and active network security. Also enables you to validate through a user ID.
- Defender ME Authenticator – Provides you with all the features of Defender ME Secure, in addition to incorporating multi-factor authentication: user ID, personal device-generated code and user-changeable password.
Transaction-level interface (TLI)
Broadens security outside the VTAM network front end to your users’ business transactions. Requests password validation and user ID from within the transaction to protect your organization’s sensitive transactions.
Home-node processing
Allows your users to specify the name of the machine on which they would like to be authenticated, which is especially beneficial if your users access from both home and remote locations.
Specifications
- Hardware
- IBM z Series
- Operating System
- IBM z/OS (all levels)
- Environment
- VTAM, VSAM
- Security system
- RACF, ACF2, TOPS
Resources
Defender
Protect your network resources with enterprise two-factor authentication
Achieving end-to-end governance
Governance, or the process of ensuring that access is correct and provable across the entire enterprise, is the pinnacle of IAM...
Identity-Driven Zero Trust Enhancing Cybersecurity
Identity-Driven Zero Trust Enhancing Cybersecurity
Quest Partner Webcast FY21 Q2 EMEA
Quest has the technology solutions your customers need to connect, manage and secure a remote workforce.
Quest Partner Update FY21
Recent events have forced governments to enact social distancing measures and business closures that have disrupted daily life ...
Privileged access management for hybrid cloud environments
Moving to the cloud can offer some significant benefits, but ensuring security and achieving compliance in cloud based environm...
Don’t protect privileged accounts with just a password
You’ve decided that you need to ensure the security of your privileged accounts by using a privileged password safe.
Get enterprise provisioning right finally
Perhaps the biggest challenge in IAM is provisioning and deprovisioning in a constantly evolving enterprise that includes legac...