Raz-Lee Security, a leading supplier of information security solutions for the IBM i, has enhanced the iSecurity product suite with its new IFS Object Security (IOS) product.

As is commonly agreed, defining proper security rights for objects is the basis for IBM i security; indeed, Raz-Lee Security released over four years ago its Native Object Security (NOS) product to address this very basic auditing and security requirement. Raz-Lee's new IOS product essentially performs the equivalent actions for objects stored on the IBM i's Integrated File System (IFS) which, in the words of IBM, "is a part of OS/400 that lets you support stream input/output and storage management similar to personal computer and UNIX operating systems, while providing you with an integrating structure over all information stored in the server."

IOS's convenient Plan, Check, Set capabilities simplifies the work-intensive, and therefore error-prone, management of access rights to IFS objects by enabling system administrators to easily define target security levels per object and to check for inconsistencies between actual and planned object security settings. IFS also enables using generic object names, and includes full reporting features.

IFS Object Security capabilities include:

• Planning multiple object security rules simultaneously using generic naming capabilities and object types

• Site specific definitions can be planned for multi-site, complex organizations

• Checking current object security against the plan and highlighting inconsistencies

• Setting the current security status to the planned status

• Object security attributes include Owner, Authorization List, Primary Group, and specific user authorities for object existence and object data

• Full reporting capabilities including to OUTFILE

"Raz-Lee strives to maximize user's flexibility and to provide numerous options for attaining total system security, auditability, and compliance," said Eli Spitz, VP

Business Development, Raz-Lee Security. "Indeed, iSecurity's Native Object Security and IFS Object Security products together provide a total solution for planning, checking and setting actual object security rules which will protect these objects from abuse and enable our customers to adhere to SOX, PCI and HIPAA regulations while at the same time easily answering auditor's requests for tighter access to critical objects".