NBA for z/OS: Features & Benefits

IP Trace Zoom IP Trace Facility (Example: trace period) Application Performance (Example: response time)

Features IP Tracing Features A probe captures and provides packet data for real-time display. There is no need to the stop the trace and wait for packet reformatting. The continuous recording of data in the NBA for z/OS dataspace means that you can trace what happened one minute ago, during the last 15 minutes, or an unlimited trace. Trace data is automatically recorded for subsequent re-run and analysis with advanced filtering (host traffic, response time, error analysis), so you can access the data you want by a simple click on a filter. There is no third-party tool needed for trace collection, so NBA for z/OS is easy to implement and it can run in any z/OS environment. The trace data can be saved in sniffer or text format for analysis with third party tools The IP and protocol headers are converted from ASCII and EBCDIC, and there is filtering for low level protocols: ICMP, IGMP, TCP, IGRP, UDP, GRE, ESP, AH, EIGRP, OSPF, L2TP Decoding for high level protocols: HTTP, SMTP, FTP, Telnet, EE, XOT, MQSeries IP Monitoring and Behavior Analysis Summarizes z/OS and TCP/IP activity and performance providing real-time and daily historical views of IP traffic, traffic analysis (application and user flows), along with logical and physical interface activity. At-a-glance assessment of availability and performance with an intuitive graphical display, shortcuts and hyperlinks, so you can quickly and efficiently react to problems and take corrective action. Statistics on IP traffic and applications such as FTP, Telnet, MQSeries, XOT, EE, TN3270 Host and network response time for IP resources (i.e., local & remote applications, IP networks and TCP connections) Connection diagnosis, including traffic, response time and errors for each TCP connection Ability to view several probes on the same screen Real-time SNA status

Real-Time Alarms on Abnormal Behavior and Intrusion Detection

• Analyze and alert on abnormal behavior of an IP resource (e.g., bad application response time, bandwidth consumption, etc.)
• Uses Deep Packet Inspection (DPI) technology to detect malicious traffic on the enterprise network
• Behavior rules can be defined to associate action(s) with conditions
• Proactively detects issues and notifies you when a condition is matched to minimize any impact on end-users. It can provide alerts in a variety of ways, including SMTP Trap, Syslog and email.
• Automatic audit to support enterprise policies and reduce compliance costs.

Reporting

• Wide variety of performance management and content error reports that can be generated on-demand or batch reports (based on length of retained data).
• Reports can be generated on-line or output in PDF format. They include all information accessible from the Web interface for one or more LPAR(s).
• Statistics are dynamically displayed on a running 24-hour basis. A user can drill down to view anything that may have occurred during a prior 24-hour period without having to generate a report.
• Multiple graphical reports on one page for faster and easier identification of anomalies without the need for extensive customizing.
• View statistics on several IP stacks on one screen with drill-down capabilities and instant tracing on any resource for fast problem tracking and resolution.
• Host and network response time for IP resources such as local and remote applications, IP networks and TCP connections
• Ability to generate customized reports
• Extended archiving capabilities
• Statistics can be exported via email and SMF files in CSV format

Benefits

ServicePilot NBA for z/OS iseasy to install and configure and it generates immediate results. It increases network team efficiency across the enterprise by providing transparency and end-to-end visibility of application performance and network behavior across functional areas. This comprehensive level of data capture and easy to use reporting decreases the time to isolate and repair problems. NBA for z/OS enables you to meetservice levels and compliance requirements for positive business results.

Application Performance

ServicePilot NBA for z/OS enables IT teams to measure, analyze and maximize in real-time an application's performance. It profiles and analyzes the typical behavior of an application and the underlying network. If there are any meaningful changes in application behavior and usage patterns, NBA for z/OS will pinpoint a potential problem and automatically inform the IT staff of its most likely cause, thereby reducing the time to resolution.

• Builds the entire application path between mainframe and end-users
• Combines data flows with user identity
• Measures and analyzes application performance in real-time
• Profiles and analyzes typical application behavior

Real-Time Intrusion Detection

NBA for z/OS detects suspicious connections, analyzes network traffic and determines their similarities with a defined set of rules. It protects the corporate network against malicious traffic and generates real-time alarms. Using DPI (Deep Packet Inspection) technology, ServicePilot NBA for z/OS looks for a pattern within a packet from a defined point and triggers a response according to the search result.

ServicePilot NBA for z/OS provides a HIDS (Host Intrusion Detection System) to protect sensitive hosts. By adding ServicePilot NBA for z/OS to other security technologies, IT staff can have security oversight across the enterprise network with true, real-time feedback of the status of security anywhere on the network. ServicePilot NBA for z/OS alerts and advises key security personnel when unauthorized deviceq or activities are detected.

• Protects sensitive hosts through HIDS
• Correlates and prioritizes security and network intelligence
• Detects security threats, misuse and sub-optimal performance
• Discovers misuse and unauthorized access
• Alerts and advises key security personnel