How to Get the Most Out of IBM’s zERT for Tracking Mainframe Network Traffic

Monitoring of encrypted mainframe network traffic by supporting IBM zERT

The IBM zERT feature provides very detailed statistics on the use of encryption protocols for all IP and TCP traffic to and from z/OS mainframes. Like with most SMF data sources, out of the box all the good data is there, but to get useful information a significant analysis effort is required.

IntelliMagic Vision provides this visibility by enriching and transforming the data to ready-to-use audit and security reports. Auditors can use the reports to track the encryption used for public and local traffic separately. Security staff can use IntelliMagic Vision to determine what traffic is not yet (properly) encrypted, down to the level of IP addresses and jobnames.