TPX and 3270 SNA Intrusion Dectection Service

Products

• TPX - Session Management

Issue/Introduction

This is realted to IBM's 3270 Intrusion Detection Services (IDS) : 

Per IBM: The SNA session managers already have the IDS function included as part of its functionality.

Does TPX provide Intrusion Detection Service?

 

Environment

Release : 5.4

Resolution

TPX does not provide Intrusion Detection Service(IDS). It is a VTAM configuration feature/function.  

The four items to look at is DSACTION, DSCOUNT, DSMONITR, DSTRUST

Example in setting up IDS

DISPLAY NET,VTAMOPTS,FUNCTION=SECURITY  -> Display
MODIFY NET,VTAMOPTS,DSMONITR=YES,DSTRUST = LOCALLU  -> Enable the monitoring
D NET,SESSIONS,SID=xxxxxx    -> SYSLOG will monitor the SIDs which are being monitored

 

The syslog will display the messages and will show what SIDs that are being monitored.

Additional Information

Please review IBM's Displaying and modifying 3270 IDS configuration from the following link: 

https://www.ibm.com/docs/en/zos/2.2.0?topic=services-displaying-modifying-3270-ids-configuration#ids_vtam_cmd