Re: Auditing file transfers

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

Ron,

Ron.Hudson@ColAik.com wrote:

> Where does the 400 log information about a user doing a file transfer with
> client access?  Does some feature need to be enabled for this function to
> happen?
>
> I see no audit trail in QHST and I also searched many of the jobs in
> subsystem QCMN and could not find anything there either.

Not automatically, but you can do the audit yourself with network exit programs.
An exit program will let you see who is transferring data, what data they are
transfering, and which direction the data is flowing.

You can either write them yourself, or using the free auditing tools that we
offer on our website at www.400security.com.

Whichever way you go, you'll probably want to monitor for Client Access file
transfer, FTP, ODBC, and some others.  The good news is that the exit programs
can also be used to block access if you want them to.


jte




--
John Earl                    johnearl@400security.com
The PowerTech Group      --> new number --> 253-872-7788
PowerLock Network Security   www.400security.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---