iFileAudit, an audit tool for tracking field-level System i database changes, now permits tracking record read activity for selected files.
Kisco Information Systems (www.kisco.com) has announced Release 4 of its popular iFileAudit security product for the IBM System i family of servers. iFileAudit is an audit tool for tracking changes to files in native System i databases at the field content level.
In response to customer requests, iFileAudit Release 4 now includes a feature that allows users to track record read activity for selected files. Prior to this change, only file add, delete, update and maintenance changes were tracked. Since tracking all file read activity can consume machine resource, this feature has been implemented with required filter specifications to help customers zero in on the exact nature of their audit objectives. For example, an option allows customers to exclude all reads done from batch programs. Filters can also be established based on user profile and job name. When doing read activity tracking, only the record ID viewed is captured, again for performance reasons.
Other important new features added with Release 4 include a provision to allow authorized end users, without security officer clearance, to have access to the audit information captured by iFileAudit. These users are not allowed to configure the way iFileAudit is implemented or to start or stop any core functions, but they can interrogate the data and create printed reports. This allows auditors to have direct access to the information collected by iFileAudit.
New file activity filters have also been implemented in iFileAudit Release 4. Using these filters, customers can choose to ignore certain kinds of file actions for selected files being tracked by iFileAudit. These filters include filters to suppress information being captured for record adds, deletes, updates or management changes. The default continues to be that all activity is captured when a file is initially registered.
iFileAudit works by using and interpreting file journals created and maintained by the System i OS. If you are already journaling your file, iFileAudit will work with your established journals. If not, iFileAudit will create the necessary journal objects when you register your file with the product.
iFileAudit continues its core objectives letting you track the following kinds of file changes:
- Track changes to a specific field on a specific record to review how the current field contents were entered.
- Track both mutual field changes and changes to fields done by program calculations.
- Identify the user profile that was used to make each file, record and field change.
- Identify the program that was used to make each file, record and field change.
- Identify the location from which each file change was made.
- Identify the job that made each file change.
iFileAudit includes online drill down reporting tools and customizable printed audit reports. Reports can run on a global or selected basis for each file being tracked.
This versatile package can have numerous applications within your organization. Use it to find the guilty party when unexpected or erroneous data shows up in your applications. Or use it as an audit trail tool for HIPAA, SOX, PCI or other internal change management controls. iFileAudit can also be used by application developers or system administrators to understand how a server process affects a field value during its execution.
Complete product specs and other information, including screen shots and support information, are available at www.kisco.com/ifa.
iFileAudit, is priced at $1,295 for any System i (Power IBM i, i5, iSeries or AS/400) computer. For companies with several systems, Kisco offers multi-license discounts. LPAR price is $2,195, which includes permission for multiple partitions on a single serial number. Kisco Information Systems offers a free 30-day evaluation of the product that can be downloaded with complete software documentation in PDF format from www.kisco.com. To obtain a free evaluation on CD, call Kisco at 518-897-5002 or e-mail
LATEST COMMENTS
MC Press Online