Real-time IBM i security event monitoring
Identify Security Threats Instantly
Monitor your IBM i for critical security events and receive real-time notifications, so you can respond quickly—before important business information is deleted, corrupted or exposed.
Integrate with Enterprise Tools
Send security-related events directly to your enterprise security monitor. Through integration with your security information and event management (SIEM) console, Powertech SIEM Agent simplifies and centralizes security and integrity monitoring.
Simplify Audit Journal Details
Not everyone is an IBM i expert. Powertech SIEM Agent translates complex audit journal details into plain English statements, so any operator can understand the data and act on it.
Protect Critical Business Operations
Protect the integrity of your systems and prevent unplanned security incidents by spotting risks as soon as they materialize.
Key Features
Security event monitoring
Monitor security-related events from the network, operating system, and any journal or message queue in real time, including changes to user profiles and system values, invalid login attempts, intrusion detections, and changed or deleted objects.
Real-time notifications
Maintain awareness of every security event on your system in real time so you never miss a potential security breach. Powertech SIEM Agent for IBM i will provide alerts to ensure critical issues are escalated.
Event filtering
Avoid flooding the network and filling up your SIEM solution with every single journal entry. Powertech SIEM Agent for IBM i provides flexible and intelligent filters to help you review the information you want to see, and also save space and bandwidth on the syslog server. Filter information by event type, user ID, IP address, and time and day of the week.
SIEM integration
Identify security events even faster with software that integrates seamlessly with the SIEM you use every day. Powertech SIEM Agent for IBM i sends over 500 security events to a syslog server and integrates with virtually any SIEM solution, including LogRhythm, ArcSight, Tivoli, Kiwi, Splunk, and many others.
Multiple export options
Export your security event data the way you want to. Powertech SIEM Agent for IBM i can send data directly to your SIEM console, a stream file on the IFS, or write to its own message queue—or any combination of these options.
Import Events from Other Powertech Solutions
Powertech SIEM Agent for IBM i makes it easy to import events from other Powertech solutions, including:
- Powertech Antivirus for IBM i
- Powertech Authority Broker
- Powertech Command Security
- Powertech Exit Point Manager
This way, you can be sure that critical security information from your Powertech products is being communicated to your SIEM console.
Get Started
Monitor, capture, and send security-related events from IBM i directly to your enterprise security monitor. See what Powertech SIEM Agent for IBM i has to offer in a short demo.
Want to secure your IBM i?
In just 10 minutes, find out where your IBM i security currently stands with a free Fortra Security Scan. We’ll evaluate your system’s vulnerabilities and suggest steps you can take to protect your critical data. It’s quick and easy, with no obligation to you.