With the Rules Facility, CA VM:Secure monitors invalid logon attempts and records them by user ID and terminal address. Terminal addresses can identify logical devices (LDEV), TCP/IP IPv4 and IPv6 addresses, network IDs (NETID), or real terminals.
For TN3270 connected terminals, the IPv4 dotted decimal IP address or IPv6 colon hexadecimal IP address can be used to control access to the system.