CPF uses Journal Files to provide an historical record of the command traffic to and from CA Top Secret. An individual Journal File is a print file which can be printed offline or viewed online. CPF will optionally allocate one Journal File for each remote node defined to it through the CPFNODES control option plus one Journal File for all incoming traffic. (Remember that CPFNODES specifies the places that CPF can send to but does not affect from where it can receive.)
When CPF transmits a command to a remote destination, it records the command image on the Journal File for that node and associates an ID number with that command. When a response is received from the remote node, CPF journals the response and the ID number so that the response can be matched to the command that prompted it. Similarly, when a command is received from a remote machine, CPF journals the command, the ID number, and the node name that sent the command.
When the response is sent back, it is journalled along with the ID and remote destination name. Thus, by examining the appropriate Journal File, an auditor can see exactly what came in, what went out, and the results of the action taken. Unlike the CPF Recovery File, the CPF Journal Files log commands regardless of whether WAIT(YES) or WAIT(NO) was specified.
|
Copyright © 2014 CA Technologies.
All rights reserved.
|
|