MQSeries.net :: View topic

RogerLacroix

The MQ Standard Security Exit for z/OS (z/MQSSX) is a new solution that allows a company to control and restrict who is accessing a z/OS WebSphere MQ resource. The security exit will operate with WebSphere MQ v5.3.1 and v6.0 in z/OS v1.4 or higher environments. It works with Server Connection, Receiver and Requestor channels of WebSphere MQ queue manager.

The MQ Standard Security Exit for z/OS solution is comprised of a server-side security exit.

Server-Side Security Exit Summary

The server-side security exit is available as:
- z/OS load-module

The server-side security exit major features are:
- Allow or restrict the incoming UserID against a regular expression pattern
- Support for Proxy UserIDs
- Allow or restrict the incoming IP address against a regular expression pattern
- Limit the number of incoming channel connections on a SVRCONN channel.
- Allow or restrict the use of 'mqm', 'MUSER_MQADMIN', 'QMQM' or 'CHIN' task UserId UserIDs
- Provides logging capability for all connecting client applications regardless if they were successful or not.
- Provides logging capability via Write To Operator (WTO) facility.

Bonus
Included with z/MQSSX is an ISPF application to help the user create and manage z/MQSSX IniFile keyword values.

Pricing
The server-side security exits are provided in the format of a native z/OS load-module is currently available for z/OS v1.4 or higher. The pricing of Capitalware's MQ Standard Security Exit for z/OS solution is on a 'per queue manager' basis.

MQ Standard Security Exit for z/OS will sell for $2490.00 USD for a single queue manager license plus 15% yearly maintenance and support fee. Volume pricing will be as follows: