XCOM SAF rule giving access to all LUs and IP addresses

Products

• XCOM Data Transport - z/OS
• XCOM Data Transport

Issue/Introduction

Creating the necessary ACF2 rules to restrict LU's or IP addresses to be used for XCOM transfers after specifying LUSECURE=YES in the CONFIG member. How do I configure a SAF rule to allow all SNA LU's or ALL TCPIP addresses to be used for XCOM transfers? Once that is done we will code the specific rules for those LU's and IP addresses that we want to restrict. 

Would we code the rule to use a wildcard for destname as follows:
XCOM.XCOM.LU.*.SEND.L
and give all users READ?

Environment

Release : 12.0

XCOM Data Transport for z/OS

Resolution

Yes, the rule would be defined as "XCOM.XCOM.LU.*.SEND.L " and provide READ access for all users to allow all users to perform transfers to the partner systems.
To define rules to restrict for specific LU's or IP addresses, please refer to the Administrator guide and Partner Security section.

Additional Information

In the above rule sample, the " * " is used as the wildcard character, but you should double check what is the designated wildcard character for your security package. For example, ACF2 may use the " - " as the wildcard character.