Category: Security
Security
SkyView Partners, a long-time security vendor in the IBM i space, is branching into the AIX world. Skyview President Carol Woodbury explained the details in a press release: "AIX is a new platform for SkyView and we are excited to show the AIX community a new way of addressing security compliance and administration."
Read the rest of entry »
Linoma Softwareannounces the release of
GoAnywhere Gateway version 1.1, a bidirectional proxy solution that safeguards customer networks when exchanging data with external systems. GoAnywhere Gateway is a software-only solution typically installed in a customer's demilitarized zone (DMZ) or public-facing network.
Read the rest of entry »
Linoma Software announces the 2.5 release of GoAnywhere Services, a
secure file server application that lets trading partners connect and exchange data using standard and secure protocols.
Read the rest of entry »
BlueCross BlueShield of Tennessee has completed a $6 million effort to encrypt all at-rest data throughout its enterprise to increase the security around its members' personal information. The effort includes servers running AIX.
Read the rest of entry »
Regardless of what you know or “think” you know about the PCI DSS, always remember this: The purpose of complying with the requirements outlined in the DSS is to ensure that, should a breach of credit card data occur, your organization can accurately recreate the sequence of events and chain of custody associated with that breach of cardholder data.
Read the rest of entry »
While we haven't extensively covered cloud computing yet at Power IT Pro, there are a handful of well-respected players offering AIX-focused professionals the ability to serve up Power Systems-based servers from the so-called clouds.
Connectria is one, and I know the company serves up a variety of AIX-focused configurations for several dozen customers, large and small. The latest company to invest in IBM Power Systems cloud offerings is
Logicalis, which is offering its new Enterprise Power Cloud service -- based on IBM Power 770-class systems capable of supporting multi-tenancy running AIX and i5/OS virtual servers.
Read the rest of entry »
IBM has released a new .pdf detailing service and support best practices for AIX, as well as updated its AIX support lifecycle information page. The latter provides a handy table of AIX Technology Level (TL) fix support release dates and end of availability. Basically, IBM is now offering three years of new fix support for each TL, and to ease the burden on administrators, IBM will only have one TL update per year for each version of AIX -- but service packs for TLs will still be released several times each year.
Read the rest of entry »
Centrify Corporation today announced Centrify Suite 2011, the latest release of its flagship security and compliance solution. Centrify Suite 2011 features enhanced platform support for IBM AIX 7.1, as well as support for storing and managing more AIX extended attributes. The suite boasts enhanced administration and privilege management capabilities, expanded coverage for additional platforms, and application single sign-on capabilities allowing enterprises finer grain control and auditing over an expanded set of data center systems and enterprise applications.
Read the rest of entry »
You might have noticed a disturbance in the Force on February 3, 2011. On that auspicious date, the Internet officially ran out of IPv4 addresses. What does that mean for you? Before I answer that, let’s recap the story so far: A long time ago (1981) in a Defense Advanced Research Projects Agency far, far away, the Internet as we know it was invented. The several inventors decided to give their nascent network four billion unique addresses, which seemed reasonable at the time, given the Earth’s population had barely reached this number itself. Then, last Wednesday, we ran out.
Read the rest of entry »
IBM's AIX has always enjoyed a reputation for security above the cut of other Unix platforms. For example, the AIX Security Expert (AIXpert) streamlines security implementation, and features such as Role Based Authentication (RBAC), Trusted AIX (multilevel security), and Trusted Execution (code and file signatures) provide built-in security bulwarks that let you seriously lock down any AIX box.
Alas, there is one security milieu that has gotten short shrift by AIX. The Internet's follow-on to IPv4 addressing, the IPv6 protocol, presents major security vulnerabilities to AIX installations (as well as those of other OSes). These vulnerabilities have fallen below the radar of many security managers because they haven't explicitly implemented IPv6 yet. Some may have even explicitly disabled IPv6 on AIX -- following the security dictum of least privilege -- leading to a false sense of safety.
Read the rest of entry »