zERT SUMMARY RECORDS USAGE QUESTION IN NETMASTER

Products

• NetMaster Network Management for TCP/IP

Issue/Introduction

We are setting up ZERT but we probably will only turn on ZERTSUMMARY.  With that: What functions are still available to us for zERT?:

-

From the Installation Guide -  

Enable the following zERT-related parameters in the TCP/IP STACK PROFILE dataset:

GLOBALCONFIG parm ZERT

SMFCONFIG TYPE119 parm ZERTDETAIL

NETMONITOR parm ZERTSERVICE

-

Environment

OS : z/OS

Release : 12.2

Component : CA NetMaster Network Management for TCP/IP

Cause

-

Resolution

NetMaster Level 2 Support provided the response:

 

We do not intercept zERT summary records at the moment--they were not available at the time that we implemented zERT support.  

 

 

We use each zERT SMF detail record to send to the Packet Analyzer where it then correlates and updates the encryption

 

information for each specific connection.

 

 

ZERTDETAIL is required to use zERT functions in NetMaster for TCP/IP.

 

Additional Information

Further important references to this topic:

Installation Guide--Setup of zERT records:

https://techdocs.broadcom.com/us/en/ca-mainframe-software/performance-and-storage/ca-netmaster-shared-content-library/12-2/install-or-upgrade-ca-netmaster-products/post-installation-tasks/prepare-ibm-communications-server-tcp-ip-and-ftm-only.html#concept.dita_76b1ac2f01199f26ff72bc6bf8bdf9bf066b8bba_SetUpCollectionofzERTDatanwmipOnly

 

Packet Analyzer--from Administrating:

 

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/performance-and-storage/ca-netmaster-network-management-for-tcp-ip/12-2/administering/setting-up-the-packet-analyzer.html#concept.dita_5bb408955a8ab3850344db1fe74f6768bbddda34_PacketAnalyzer  

 

 

Use zERT Data to Verify That Incoming Connections Adhere to Security Policy--from Implementing:

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/performance-and-storage/ca-netmaster-network-management-for-tcp-ip/12-2/implementing/configuring-event-monitoring/use-zert-data-to-verify-that-incoming-connections-adhere-to-security-policy.html  

 

Use zERT Data to Help Enhance Application Security--from Updates in Increment 03 (INC03):

 

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/performance-and-storage/ca-netmaster-network-management-for-tcp-ip/12-2/release-notes/updates-in-increment-03-inc03.html#concept.dita_d32c67a563ad5312c7b28c05d2a3280fe9764fcd_UsezERTDatatoHelpEnhanceApplicationSecurity  

 

 

Selecting a destination for zERT aggregation SMF records--from IBM Knowledge Center:

 

https://www.ibm.com/support/knowledgecenter/SSLTBW_2.4.0/com.ibm.zos.v2r4.halz002/zrta_smf.htm