ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » Clustering » Can MQ ESE secure my MQ Clusters?

Post new topic  Reply to topic
 Can MQ ESE secure my MQ Clusters? « View previous topic :: View next topic » 
Author Message
Monk
PostPosted: Thu Apr 23, 2009 4:29 am    Post subject: Can MQ ESE secure my MQ Clusters? Reply with quote

Master

Joined: 21 Apr 2007
Posts: 282

Hi All,

Would like to know if MQ ESE(extended security edition) would help me secure my MQ cluster.

I have clusters setup across all kinds of platfrom , from aix to mainframes..
i need a central adminitrative utility to manage the security policies for the Queue managers on all these platforms...

Is MQ ESE worth it, I couldn't get a trial version to test it.

is there any other prorgam out there that can do this?.

Thanks.
_________________
Thimk
Back to top
View user's profile Send private message
RogerLacroix
PostPosted: Thu Apr 23, 2009 7:37 am    Post subject: Re: Can MQ ESE secure my MQ Clusters? Reply with quote

Jedi Knight

Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada

Monk wrote:
Is MQ ESE worth it, I couldn't get a trial version to test it.

is there any other prorgam out there that can do this?

Yes, MQ Authenticate User Security Exit (MQAUSX) can easily secure your MQ cluster (and it is substantially cheaper than WMQ ESE).

We will happily offer you a FREE trial of MQAUSX which includes free support via email, Help Desk or phone (even during the trial period). MQAUSX is available on AIX, HP-UX, Linux, Solaris, iSeries and Windows. We also have another version for the mainframe called MQ Authenticate User Security Exit for z/OS (z/MQAUSX)

Please let me know if you have any questions or comments.

Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter
Back to top
View user's profile Send private message Visit poster's website
Monk
PostPosted: Thu Apr 23, 2009 8:38 pm    Post subject: Reply with quote

Master

Joined: 21 Apr 2007
Posts: 282

Good.

But can your MQ Authenticate User Security Exit do these


# Delivers centralized, remote administration of security policies through a standard Web browser
# Supports WebSphere MQ servers and clients on z/OS and distributed platforms without any modification of your existing applications and queues
# Provides a message-level audit function and generates audit records that can be used to demonstrate specific compliance with a defined security policy

Let me know.

Thanks.
_________________
Thimk
Back to top
View user's profile Send private message
RogerLacroix
PostPosted: Fri Apr 24, 2009 6:08 am    Post subject: Reply with quote

Jedi Knight

Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada

Hi,

Some background information: A channel security exit is ONLY invoke on MQCONN, MQCONNX and MQDISC API calls. Hence, a channel security exit never "sees" the messages as they flow through the channels.

Monk wrote:
# Delivers centralized, remote administration of security policies through a standard Web browser

No.

We do not require any extra server applications to be running where the MQ server is located. The MQAdmin simply uses the standard setmqaut & dspmqaut commands for distributed platforms and RACF (or ACF2) for mainframe applications.

Monk wrote:
# Supports WebSphere MQ servers and clients on z/OS and distributed platforms without any modification of your existing applications and queues

Yes. Absolutely no application code changed is required to use MQAUSX or z/MQAUSX. The goal is to provide seamless security integration for all applications including legacy applications.

Monk wrote:
# Provides a message-level audit function and generates audit records that can be used to demonstrate specific compliance with a defined security policy

No.

Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » Clustering » Can MQ ESE secure my MQ Clusters?
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.