APPN-EE Firewall: Enterprise Extender & SNA Security

The IP network: Gateway for mainframe attacks

IP firewalls don't understand SNA/APPN or Enterprise Extender (SNA/APPN traffic wrapped in IP packets).

The APPN-EE Firewall checks each connection to the mainframe and protects against attacks through SNA and APPN.

The firewall runs in APPN, IP, and Enterprise Extender environments on MVS, OS390 and z/OS.

Mainframe Firewall for z/OS

- APPN-EE Firewall Host

- APPN-EE Accounting

- APPN-EE SMS Sharing Manager

The APPN-EE Firewall...

• Checks whether a session is allowed, before the session partners are installed.
• Checks LU types, encryption, compression, control-point verification.
• Checks access to terminals, printers, servers, file transfer.
• Controls unwanted pass-through traffic.
• Correlates logical connections to physical connections.

The APPN-EE Firewall blocks...

• Spoofing RACF/ACF2/TSS.
• Spoofing networks.
• Rerouting sessions.
• Man-in-the-middle hijacking.
• And more.

The APPN-Firewall reports to...

• SMF records.
• Security log.
• Report file.
• System console.

Workstation Package for Windows

Provides analysis and optimization for z/OS, z/VM, and z/VSE.

Audit multiple systems from one central point outside of any mainframe.

- Net-Examine

- VTAM Security Generator

- RACF/ACF2/TSS Security Generator

- VTAM Performance Generator

- Sarbanes-Oxley Compliancy

- NIST Compliancy

- Security Standard Generator