Rules Facility Guide › Security with the Rules Facility › CA VM:Secure Journal Facility and CP Journaling

CA VM:Secure Journal Facility and CP Journaling

CA VM:Secure provides a journal facility that is superior to native CP journaling.

CP journaling allows you to accumulate data on invalid or unauthorized attempts to log on and link, and to prohibit further attempts when a specified number of invalid attempts is reached. It also allows a limited reset capability, but you must reset all journal counts at the same time.

The Journal Facility supplements and surpasses native CP journaling. You have much finer control over the journaling process and over required resets; you can reset a single user ID’s or terminal address’s journal count.

You can use the TERMPASS and USERPASS user exits to give selected user IDs special journal handling. For example, you can ensure that a hacker’s invalid logon attempts do not prevent a legitimate logon to a critical user ID such as MAINT.

When you have CA VM:Secure journaling in place, use the JOURNAL and RESET commands to view and modify current journal counts.