© Softmark Continuous Availability Operational Simplicity Financial Advantage Secure Your Stratus Systems VOS Auditor Capabilities
© Softmark Provide comprehensive, cost effective security program Satisfy internal audit requirements Satisfy corporate governance, regulatory and industry standards (PCI) Eliminate security threats and vulnerabilities Reduce cost by automation Protect your most important asset – your data Objectives
© Softmark A complete suite of solutions designed to facilitate administration and management of Stratus/VOS security The only solution that meets the latest PCI standards Modular solutions tailored to specific customer ’ s requirements What is VOS Auditor?
© Softmark Auditor’s Layered Design Configuration - definitions of all regulated data files, monitored objects, directories and user's access profiles. 24x7 Monitoring - real time monitoring of configured objects, with automated responses, blocks and alarms. Reporting - periodic or on-demand auditing reports of all security-related events.
© Softmark VOS Command Shells Designed to be used by system operators, developers and administrators Shields the system from unauthorized use - eliminates direct command line access Offers secure, comprehensive audit trail reports of all commands executed, user's identity and time of activities Authorizes command execution based on user's security profile Manages developers and system-administrators privileges without affecting their day-to-day activities. Monitors and terminates inactive sessions Incorporates comprehensive password protection
© Softmark VOS Command Shells
© Softmark Maintains access rights in a centralized configuration database for the entire system Assures that access rights are always up-to-date Incorporates simple scripts into powerful command macros Allows the system administrator to classify detailed security levels and easily promote or demote users from one level to another Scans all system directories reports and clears any deviation from standard configuration Works with standard VOS access-control-lists (acl/dcl) Access Control Manager
© Softmark Access Control Manager
© Softmark Security Alert Manager Offers real-time background and non intrusive operation Monitors of all security related activities Handles security breaches based on system controls & configuration Eliminates risk by automatically executing user-defined procedures Sends critical alerts to selected – terminals – pagers (numeric, text, SMS) – boxes – other systems Offers Operator’s Console and a Secure Privileged Shell Distributes detailed reports to any key personnel based on defined schedule
© Softmark Putting it all together
© Softmark Reporting User Registration report Activities and critical commands Incident and security events System Configuration changes VOS-Audit Admin VOS Security and System report Delivery: – By to any selected personnel – On-demand or by predefined schedules – WEB/HTTP based, easy to read reports
© Softmark Reports
© Softmark Registration report
© Softmark Activity report
© Softmark Incident report
© Softmark “Its extensive security features allowed us to reduce the risk of human error as well as audit our operators and end-user activities” Erick Mazariegos, DTCC, Director Application Development “It has also put us in good shape for our upcoming security audit. We can track everything that each operator does …there is no concern that someone can go into the application and damage the system. We now have the individual accountability and auditing which were lacking before.” Rob Aronson, Lead Design Analyst “The product assisted us in managing our production network. Job scheduling, nightly batch cycles and process management are now fully automated ” Alex Tulchinsky, Director AOL Corporate Business Systems Operations VOS-Auditor
© Softmark SoftMark solutions are exclusively distributed worldwide by Contact: Mr. Eran Mertens Telephone: ARI: SoftMark: