NetMaster

 View Only
  • 1.  New Feature – NetMaster for TCP/IP zERT SMF Write Option

    Broadcom Employee
    Posted Jan 13, 2020 01:10 PM

    The NetMaster product team is pleased to announce the addition of an additional parameter to the IP Applications maintenance panels (/IPAPPLS) which gives our customers a new tool to better manage the volume of z/ERT encryption SMF records that are written to their SMF logs.

    z/ERT (which stands for z/OS Encryption Readiness Technology) provides a rich source of data about the cryptographic security attributes of IP traffic on the mainframe network. NetMaster 12.2 has the ability to consume z/ERT Detail (SMF 119 subtype 11) records to allow our customers to track and trigger events based upon the security envelope information for protected traffic.

    The /IPAPPLS interface has always given our users the ability to allow NetMaster to use the z/ERT records and then prevent their being written by setting the "Write TERM Records" option to "NOWRITE", but this setting affected both the connection termination and z/ERT record creation.

    This new feature splits out the setting for whether z/ERT detail records are written to a separate control "Write zERT Records", and allows our customers granular control over their SMF record creation.

    Please see http://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/performance-and-storage/ca-netmaster-network-management-for-tcp-ip/12-2/release-notes/updates-post-ga.html to review the release notes for this new feature.

    If you would like to learn more about how NetMaster can use z/ERT to assist you in managing the security of your mainframe network, please visit this link: https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/performance-and-storage/ca-netmaster-network-management-for-tcp-ip/12-2/implementing/configuring-event-monitoring/use-zert-data-to-verify-that-incoming-connections-adhere-to-security-policy.html

    Please take a few moments to submit any ideas for product enhancements you may have using the "Ideation" link on https://community.broadcom.com/home, and we invite you to join us in our validate program, which will allow you to participate in live demos, sprint reviews, and help us shape the future of NetMaster. Please register at: https://validate.broadcom.com/key/NM



    ------------------------------
    Paul Schuler
    Product Owner - NetMaster / SOLVE
    paul.schuler@broadcom.com
    ------------------------------


  • 2.  RE: New Feature – NetMaster for TCP/IP zERT SMF Write Option

    Broadcom Employee
    Posted Jan 14, 2020 01:36 PM
    The 2 fixes for this are so11463 and so11462.

    ADD SMF WRITE CONTROL FOR ZERT RECORDS TO /IPAPPL   Fix #SO11463  NMS 8.1 OS 01/13/2020
    ADD SMF WRITE CONTROL FOR ZERT RECORDS TO /IPAPPL   Fix #SO11462  NMS 8.1 OS 01/13/2020

    Regards,
    Kevin