Security Solutions for z/OS and Open Systems
A snapshot of Software Europe’s product pages (2000)

When (maybe September 2001) Software Europe overhauled its web site, it dumped all the old pages that I had created and maintained… and that hadn’t been updated since I left in August 2000!

So for posterity, I recovered the old pages to present them on this site.

(You may see that the page design was something of a prototype of my pages here, although as I have revised the format of these pages several times the family resemblance is becoming increasingly tenuous…)

None of the text has been changed – so some of the information may be out of date! – but I’ve updated URLs and added notes (highlighted, like this) where product names have changed .

Administration solutions

Computer Associates International – eTrust CA-ACF2

Products distributed by Software Europe	Competing Products
Eberhard Klemens, Co.: ETF/A (EKC Toolkit for ACF2) E-HelpDesk	none

IBM – Security Server for z/OS and OS/390 – RACF

Products distributed by Software Europe

Competing Products

CONSUL Risk Management: Consul zAdmin RACF Consul/zAdmin RACF Consul/RACF Consul zVisual RACF Consul/zVisual RACF Consul/RACF Administrator for Windows Consul zToolkit Consul/zToolkit Consul CICS/RACF Toolkit CICS/RACF Toolkit (previous ly from Palace Guard Software) Consul InSight zLock Consul/zLock Consul/CVO (Command Verification Option) Eberhard Klemens, Co.: ETF/R (EKC Toolkit for RACF) E-HelpDesk

Beta Systems Software AG: BETA 88 RACF Manager Vanguard Integrity Professionals: Vanguard Administrator RioVision

Auditing solutions

IBM z/OS and OS/390 audit and event monitoring

Products distributed by Software Europe	Competing Products
CONSUL Risk Management: Consul InSight zAudit ACF2 z/OS vulnerability assessment, ACF2 policy compliance and baseline monitoring, and SMF information management Consul/zAudit ACF2 Consul/Audit for ACF2 Consul InSight zAudit RACF z/OS vulnerability assessment, RACF policy compliance and baseline monitoring, and SMF information management Consul/Audit for RACF Consul zAudit RACF Consul InSight zAlert real-time information management Consul zAlert Eberhard Klemens, Co.: E-SRF (EKC Security Reporting Facility) ACF2 & RACF policy compliance and SMF information management	z/OS vulnerability assessment
	Computer Associates International (CA): eTrust CA-Examine Auditing Vanguard Integrity Professionals: Vanguard Analyzer
	RACF policy compliance
	Vanguard Integrity Professionals: Vanguard Enforcer (real-time baseline monitoring) Vanguard INCompliance
	SMF information & event management
	Allen Systems Group (ASG) : ASG-Audit for Security Server Beta Systems Software AG: BETA 89 Automated Security Auditor (real-time only) Merrill Consultants: MXG (requires SAS) Software Engineering of America (SEA) : RA/7 UNICOM Systems: SSR Vanguard Integrity Professionals: Vanguard Advisor (and real-time)

Security information & event management (SIEM)

(SIEM embraces both security information management (SIM) and security event management (SEM). It has sometime been called IT security management (ITSM), but this is a much more ambiguous term.)

When CONSUL launched Consul/Enterprise Audit, there were few products quite like it. It’s focus was on normalized reporting of events from heterogeneous platforms, but it ran up against early SIM & SEM products that focussed on correlated reporting of events from security devices (firewalls, intrusion detection sensors, etc.). CONSUL responded by extending Consul/eAudit to embrace these information sources as well.

More recently, some IAM technology providers have identified a need for normalized reporting of events from the target systems of their IAM solutions. Two IAM vendors, BMC Systems and Courion, now partner with CONSUL to offer Consul InSight Security Manager. HewlettPackard offers OpenView Select Auditor, a “target system”-focussed SIM-type product. Sun Microsystems offers an Identity Service for SEM module within its JavaSystem Identity Auditor product, allowing SIEM tools to correlate different identities belonging to the same indivdual.

Products distributed by Software Europe

Competing SIEM Products

CONSUL Risk Management: Consul InSight Security Manager Consul/eAudit Consul/Enterprise Audit

ArcSight: ArcSight Check Point: Eventia Analyzer Cisco Systems: Cisco Security Monitoring and Response System (CS-MARS) Computer Associates (CA): eTrust Security Command Center eIQnetworks: Network Security Analyzer e-Security: Sentinel GuardedNet (to be acquired by Micromuse): neuSECURE HighTower: TowerView Security IBM Tivoli: IBM Tivoli Risk Manager Intellitactics: Network Security Manager (NSM) LogLogic: LX and ST appliances Micromuse: Netcool for Security Management netForensics: Security Information Management NetIQ Corporation: Security Manager VigilEnt Log Analyzer (formerly from PentaSafe Security Technologies) Network Intelligence: Network Intelligence Engine (appliance) Q1 Labs: QVISION OpenService: Security Threat Manager SenSage: SenSage (formerly Addamark Omnisight; changed name 14 October 2004) Symantec: Incident Manager Event Manager for Antivirus Enterprise Security Manager Tier-3: Huntsman TriGeo Network Security: TriGeo

Other solutions

Products distributed by Software Europe	Competing Products
MegaCryption.cc: MegaCryption/MVS	?
Link\Manage bvba: Secure\FTP	?