Networking on z/OS
Previous topic | Next topic | Contents | Glossary | Contact z/OS | PDF


TCP/IP on z/OS security features

Networking on z/OS

There are some security features for which, although implemented on most platforms, no standardization is necessary. Additionally, there are some security features that are completely unique to the z/OS environment.

  • Intrusion Detection Services (IDS)
    In z/OS, the Intrusion Detection Services (IDS) capabilities are built into the stack itself.
  • The System Authorization Facility (SAF) in a network context
    What exactly can SAF do in a networking context? It can collectively do more to restrict end-user capabilities than any organization might ever want to implement. In other words, the security features listed here might be used in combinations, but it is unlikely that any organization would want to implement more than a few of these features.
  • More port control
    Port control is a big topic in the world of network security. Within an organization, an individual or group responsible for a boundary device firewall might have strict rules as to which ports can be used. And, even within the z/OS host, keeping a tight control on which ports are available is a key to a healthy and secure system.
  • IP filtering
    Although the z/OS operating system is not an ideal operating system to run as a routing host, it does have the capability of running fully functional firewall filtering rules.
  • More network security options
    The use of multiple TCP/IP stacks and socket options can be considered a security issues.
Parent topic: TCP/IP security

Go to the previous page   |   Go to the next page

Notices | Terms of use | Support | Contact z/OS



Copyright IBM Corporation 1990, 2010