Vanguard CleanUp & Offline
- Vanguard CleanUp generates commands to remove unused profiles, permissions, users, and groups from the RACF database using historical RACF requests.
- CleanUp users can also employ the Vanguard Offline tool as an added layer of security to test the impact of deleting identified profiles on the system before the profiles are removed from the production RACF database.
- Identifies obsolete RACF entities for removal based on historical data, with an offline testing layer to ensure system stability before deletion.
Features:
- Audit driven excess access and prior user identification for removal.
- Operationally efficient as applications are optimized to produce quick results.
- Generates commands to delete (and restore) unused and unwanted profiles./li>
- Produces a wide-range of usage reports for auditors and security administrators.
- Analyzes the database to identify and report on all unreferenced or unused RACF entities.
- Impact Analysis Report (IAR) including SURROGAT class analysis.
- Collects and aggregates all security decisions into a database.
- Produces a wide-range of usage reports for auditors and security administrators.
- Provides complete accounting of all authorization requests.
With Vanguard CleanUp™, security administrators can easily and automatically monitor z/OS Security Server access to identify and report on unreferenced security rules.
Vanguard Offline allows detailed reporting of how resources are accessed including, who, when, where, and what level of authority. This allows for complete and accurate remediation of excessive or inappropriate access to resources.