Tivoli Intrusion Manager 3.7 Enables Effective Security Management

Transcription

1 Software Announcement August 28, 2001 Tivoli Intrusion Manager 3.7 Enables Effective Security Management Overview Tivoli Intrusion Manager 3.7 is a new entry-level security product from Tivoli Systems that enables you to quickly implement an effective solution to mitigate and manage intrusions, and protect your network and Web servers. Tivoli Intrusion Manager offers a single event and problem management screen to monitor events on up to twenty systems and to quickly respond to security attacks. Intrusion Manager will benefit the Information Technology manager by helping to address: The unavailability of security skills Security threats The costs and complexity of security products The use of complex and different products Intrusion Manager addresses all these concerns through the use of a centralized management console, advanced event correlation, and reporting/analysis. By integrating a variety of sources and combining a Web Intrusion Detection System, Network Intrusion Detection System, and DB2 Universal Database, Tivoli Intrusion Manager secures a customer s environment and brings together data collection, analysis, and problem resolution into a single monitoring system. If you have selected Tivoli Intrusion Manager, you will be able to upgrade to Tivoli Risk Manager, if the need to manage larger environments arises. Tivoli Risk Manager is Tivoli s solution to prevent and manage cyber-threats such as intrusions, viruses, or vulnerabilities across the enterprise. Planned Availability Date September 28, 2001 At a Glance Tivoli Intrusion Manager offers: A centralized console that helps reduce the need to monitor multiple vendor security systems, making it easy to manage your environment Detection of attacks by relating data from different sources Analysis and reports to detect potential vulnerabilities A centralized system which reduces the cost and complexity of administering multiple security systems A limited-use license of DB2 Universal Database that ships with Intrusion Manager The ability to consolidate and throttle events from products to reduce complexity A Web and network intrusion detection system that gives added protection to networks and Web servers For ordering, contact: Your IBM representative, an IBM Business Partner, or IBM Americas Call Centers at 800-IBM-CALL Reference: YE001 This announcement is provided for your information only. For additional information, contact your IBM representative, call 800-IBM-4YOU, or visit the IBM home page at: IBM United States IBM is a registered trademark of International Business Machines Corporation

2 Description Tivoli Intrusion Manager 3.7 is a new entry-level security product from Tivoli Systems that enables you to quickly implement an effective solution to mitigate and manage intrusions, and protect your network and Web servers. Tivoli Intrusion Manager offers a single event and problem management screen to centrally monitor events on a number of systems and to quickly respond to security attacks. Tivoli Intrusion Manager consists of a server to centrally consolidate and correlate events, a set of adapters/sensors, a Java console to view and monitor events and problems, a DB2 limited-use license, and a set of Crystal Reports. Intrusion Manager has the following features and functions: Central consolidation of events from multiple products Norton AntiVirus, Cisco IDS, firewalls, and routers A Web and network intrusion detection system that provides added protection to networks and Web servers Ability to filter and throttle events Intelligent detection and correlation of intrusions and threats An easy-to-use Java GUI console for event and problem management The ability to manage problems and assign resources A set of Crystal Reports related to firewall management, antivirus management, intrusion management, and risk and vulnerability assessment Tivoli Intrusion Manager can be upgraded to the Tivoli enterprise management solution. For example, Tivoli Intrusion Manager can be initially implemented to protect an e-business environment against intrusions. This e-business environment may be initially made up of ten Web servers, two firewalls, and one router. Intrusion Manager s intrusion detection technology, such as the Network Intrusion Detection System and Web Intrusion Detection System, can be added to this existing environment. As your e-business initiatives expand, you will need to manage the security of a larger environment. This can be done by upgrading to Tivoli Risk Manager, which enables central management of multiple and more complex e-business environments. Crystal Reports is a product/technology of Seagate. Refer to: Reference Information Software Announcement , dated February 15, 2000 Software Announcement , dated July 10, 2001 Software Announcement , dated July 10, 2001 Trademarks DB2 Universal Database and DB2 are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Java is a trademark of Sun Microsystems, Inc. Tivoli is a registered trademark of International Business Machines Corporation or Tivoli Systems Inc. in the United States or other countries or both. Other company, product, and service names may be trademarks or service marks of others. Accessibility by People with Disabilities For Software Offerings: The following features support use by people with disabilities: Operation by keyboard alone Euro Currency This program is not impacted by euro currency

3 IBM US Announcement Supplemental Information August 28, 2001 Education Support Training is available for many Tivoli products. Education is offered through IBM Education and Training, and through Tivoli Systems. Worldwide information about education offerings is available on the IBM Education and Training home page at: For current information on Tivoli Systems education, call , or visit the Tivoli Systems home page at: Offering Information Product information is available through Offering Information (OITOOL) at: Publications Tivoli Intrusion Manager has soft copy publications on the product CD. Technical Information Specified Operating Environment Hardware Requirements: Hardware platforms supporting the software levels are stated in the Software Requirements section. Software Requirements: Tivoli Intrusion Manager runs on the following platforms. Windows NT 4.0 Windows 2000 Sever Windows 2000 Professional Windows 2000 Advanced Server For information on which platforms the Tivoli Intrusion Manager adapters run on, refer to the Release Notes for Tivoli Intrusion Manager. Planning Information Direct Customer Support: Direct customer support is provided by IBM Operational Support Services Support Line. This fee service enhances customers productivity by providing voice and electronic access into the IBM support organization. IBM Operational Support Services Support Line will help answer questions pertaining to usage, and suspected software defects for eligible products. Installation and technical support is provided by Global Services. For more information, call 800-IBM-4YOU ( ). Packaging: Tivoli Intrusion Manager is distributed with: International Program License Agreement (IPLA) (Z ) License Information document (LC ) Tivoli Intrusion Manager CD-ROM DB2 CD-ROMs Security, Auditability, and Control Tivoli Intrusion Manager uses the security and auditability features of the operating system software. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities. Ordering Information New Licensees: Orders for new licenses will be accepted now. Shipment will begin on the planned availability date. Basic License: Ordering information for 5698-TIM will continue for a limited time to allow migration to the Passport Advantage (PA) offering. To order a basic license, specify the program number, feature number 9001 for asset registration, and the feature number of the desired distribution medium. Also, specify the one-time charge (OTC) feature number from the tables below in the quantity desired (maximum quantity of 250). The quantity of Tivoli Management Points is based on number of application servers. Use the following table to order the program products listed below. Product Tivoli Management Points Number Product Name Qty 1 Qty TIM Tivoli Intrusion Manager Tivoli Systems Support Although the first year of support is included in the product price, a no-charge (NC) order must be placed using program number 5698-SPT specifying feature number 9001 for asset registration and the appropriate First Year Standard Support NC feature number. This 5698-SPT order establishes entitlement records This announcement is provided for your information only. For additional information, contact your IBM representative, call 800-IBM-4YOU, or visit the IBM home page at: IBM United States IBM is a registered trademark of International Business Machines Corporation

4 worldwide. If a 5698-SPT order is not placed, the customer will not be entitled to support even during the first year of a license. Prior to the end of the first 12 months support period, customers will be notified of their support renewal options. Unless the customer notifies IBM/Tivoli to discontinue or alter the level of support currently being received, support will automatically be renewed for annual billing at the same level as selected in the first year. Once the subsequent year support feature numbers are in place, renewals are automatic and billed annually unless support is cancelled by the customer. Tivoli Systems offers a variety of support options in response to diverse customer requirements. The table below summarize these offerings. Std- Support Categories Standard 24 Select Support Coverage via Normal 24 x 7 24 x 7 Web, Phone, Fax and Bus Hrs Web Support Tools Yes Yes Yes (TIPS, FAQs, White Papers, Tools, Patch Downloads) Maintenance and Upgrades Yes Yes Yes Support News Yes Yes Yes Escalation Process Yes Yes Yes Initial Tivoli Select No No Yes Support Review (one customer location and one review per contract) Heightened Responsiveness Severity 1 1 hour No No Yes Severity 2 2 hours No No Yes Severity 3 4 hours No No Yes Severity 4 4 hours No No Yes Fast Path to Tivoli No No Yes Select Level 2 Engineer Heightened Resolution No No Yes Priority Proactive Tivoli No No Yes Management Notification On-Site When Required No No Yes (two trips per year not to exceed six days in total) Tivoli Select Support No No Quar- Review and terly Recommendations (customer to identify single point of control site) Minimum of 40,000 No No Yes Renewable Tivoli Management Points Required in Aggregate 1. Tivoli Standard Support This offering provides: Technical support via Web, telephone, fax, and during normal IBM/Tivoli business hours Monday through Friday, except local holidays Corrections (PTFs) or patches that fix substantial deviations of unmodified Tivoli products from the then-current code, publications, and/or informal documentation (that is, release notes and memos) Software product updates that are improvements, extensions, or other changes which IBM/Tivoli, at its discretion, deems to be reasonable Customer Self-Help Options available via Web 24 x 7, including: Support Procedures Maintenance renewal information and registration for access to support Product-Specific Support Pages Technical Documentation Including FAQs, Quick Solution Hints and Tips, Product Certification Information, Release Notes, Installation Guides, REDBOOKS, White Papers, and Fix READMEs Knowledge Base Search engine providing answers to many technical questions; databases include APARs, FAQs, and Fix READMEs Education and Training Support Services Databases allowing customers to download code fixes and report or update problems Links to Support Contacts Providing the Tivoli Support phone number nearest the customer 2. Tivoli Standard-24 This offering provides: All components offered in Tivoli Standard Support In addition, Tivoli Standard-24 Support provides enhanced features including: Technical support via Web, telephone, fax, and , 24 x 7 including holidays Off-shift and holiday support provided on Severity 1 issues only 3. Tivoli Select This offering provides: All components offered in Tivoli Standard-24 Support In addition, Tivoli Select provides enhanced features including: Initial Tivoli Select support review Heightened responsiveness Severity 1 1 hour Severity 2 2 hours Severity 3 4 hours Severity 4 4 hours Fast path to Tivoli Select Level-2 Engineers Heightened Resolution Priority Proactive Tivoli Management Notification

5 Customer Initiated On-Site Support available up to twice per contract period Tivoli Select Support review and recommendations Support provided in English only A minimum purchase/installation of 40,000 renewable points of Tivoli products in aggregate is required to acquire this support option. Support Upgrade During the first year of a license, the customer may upgrade to the Tivoli Standard-24 or Tivoli Select Support option by ordering the applicable OTC feature number from the table below. The OTC feature numbers may be specified on the initial order or later via an MES during the first year only. Ordering this OTC feature will not result in an extension of the no-charge support period. In subsequent years, if a customer wants to upgrade to the Tivoli Standard-24 or Tivoli Select Support option, an MES order must be entered to discontinue the existing support option feature number and to add the feature number for the desired options After an MES order is entered, the support will be renewed and billed annually at that support level unless support is cancelled by the customer SPT First-Year Support Options Use the following table to order support (5698-SPT) for the program products listed below. Upgrade Upgrade from Upgrade from 1st Year from 1st Year Std-24 1st Year to to 1st Year to Std-24 Select Select Support Support Support Support NC OTC OTC OTC Support for Feature Feature Feature Feature Program Name Number Number Number Number Program Number: 5698-TIM Tivoli Intrusion Manager 3.7 Qty of Qty of SPT Subsequent Year Options Use the following table to order support (5698-SPT) for the program products listed below. Standard Std-24 Select Support Support Support Annual Annual Annual Charge Charge Charge Support for Feature Feature Feature Program Name Number Number Number Program Number: 5698-TIM Tivoli Intrusion Manager 3.7 Qty of Qty of The Standard Support option, Standard-24 Support option and Select Support option are not transferable among the Tivoli Enterprise products. If support is desired, support option feature numbers must be ordered for each licensed product. The quantity of the billable feature numbers for support must be equal to the quantity of Tivoli Management Points for a licensed product. Ordering Information for Passport Advantage To order a media pack or a documentation pack for Passport Advantage, specify the applicable part number in the desired quantity from the following table: Description Tivoli Intrusion Manager (Multilingual) Media Pack Part Number BJ00FML

6 The quantity of the Passport Advantage part numbers in the following table is based on the number of required Tivoli Management Points. To order for Passport Advantage, specify the desired part number and quantity. Description License and Software Maintenance First Anniversary License and Software Maintenance Second Anniversary Software Maintenance Renewal to Anniversary Date Software Maintenance after License to Anniversary Date Passport Advantage Software Maintenance Part Number D50KHLL D50KILL E004PLL D50KJLL Software Maintenance (called Support for Tivoli products outside of Passport Advantage) is included with each product authorization acquired under Passport Advantage. Software Maintenance provides an easy and effective way by which you have access, during the coverage period, to eligible new versions and releases and to remote technical support for your covered products. The technical support included in Software Maintenance provides remote support during normal business hours in your country or location as well as access to escalation management 24 hours a day, 7 days a week, for mission-critical (severity 1) problems. With Software Maintenance, you receive the following technical support benefits: Telephone access and/or electronic access via the Web to an IBM Customer Support Center. Support for routine, short duration installation and usage ( how-to ) questions, and code-related problems. Support during normal country business hours, namely prime shift hours, Monday through Friday, excluding national or statutory holidays. Support for mission-critical (severity 1) problems during non-prime shift hours, namely all hours outside normal country business hours including national and/or statutory holidays. Two hour response-time objective during prime shift for voice and electronic submission. The response objective for critical/emergency problems during offshift is also two hours. Access to hints, tips, and frequently asked questions. Access to escalation management 24 hours a day, 7 days a week. Open Authorized Technical Caller list to submit problems to IBM Support Centers on your behalf. Open to any number of technical specialists within your IS organization. Each caller must be registered through the IBM problem submission Web site in order to submit problems. Problem submission is handled by the Site Technical Contact as listed on the Passport Advantage enrollment form. ecare for Software is an initiative designed to enhance your electronic support experience by providing the following advantages: Single view of IBM distributed software that includes easy/integrated access to the following information and functions: -- Marketing -- Technical -- Developer -- Business Partner -- IBM Services -- Downloads Comprehensive electronic (via the Web) self-help capabilities available 24 hours a day, 7 days a week Advanced search capabilities A single interface to the IBM problem submission/management system for IBM distributed software Passport Advantage allows you to have a common anniversary date for Software Maintenance renewals, making it easier for you to manage and budget for access to eligible new versions and releases, and for related technical support for your covered products. The anniversary date, established at the start of your Passport Advantage Agreement, recurs on an annual basis while your Passport Advantage Agreement remains in effect. However, regardless of when Software Maintenance is acquired, the coverage period for Software Maintenance is always up to the anniversary date specified in the acquisition. Software Maintenance renewals offer you favorable pricing to continue your coverage without interruption. Refer to the IBM International Passport Advantage Agreement and to the IBM Software Maintenance Handbook for specific terms relating to, and a more complete description of, technical support provided through Software Maintenance. Note: The Tivoli Select Support offering is not available under Passport Advantage. Contact you IBM or Tivoli service representative for information on separately available service offerings. Basic Machine-Readable Material Feature Distribution Language Number Medium Multilingual 5809 CD-ROM Customization Options: Select the appropriate feature numbers to customize your order with delivery options desired. These features can be specified on the initial or MES orders. Example: If publications are not desired for the initial order, specify feature number 3470 to ship media only. For future updates, specify feature number 3480 to ship media updates only. If, in the future, publication updates are required, order an MES to remove feature number 3480; then, the publications will ship with the next release of the program

7 Description Initial Shipments Feature Number Serial Number Only (suppresses shipment 3444 of media and documentation) Ship Media Only (suppresses initial 3470 shipment of documentation) Ship Documentation Only (suppresses 3471 initial shipment of media) Update Shipments Ship Media Updates Only (suppresses 3480 update shipment of documentation) Ship Documentation Only (suppresses 3481 update shipment of media) Suppress Updates (suppresses update 3482 shipment of media and documentation) Expedite Shipments Local IBM Office Expedite 3445 (for IBM use only) Customer Expedite Process Charge 3446 ($30 charge for each product) Expedite shipments will be processed to receive 72-hour delivery from the time IBM Software Delivery and Fulfillment (SDF) receives the order. SDF will then ship the order via overnight air transportation. Terms and Conditions For a limited time during the migration period to Passport Advantage, customers may acquire eligible programs and Tivoli Support under agreements outside of Passport Advantage. Terms and conditions for Tivoli Value-Based Pricing and IBM Passport Advantage are as follows: Agreement: For orders under 5698-TIM: IPLA, IBM International Agreement for Acquisition of Programs and Support (IIAAPS) and the IBM Attachment for Support, IBM Agreement for Acquisition of Support (IAAS), IBM Addendum for Support for Tivoli Systems Products under Value-Based Pricing, and an order form. For orders under Passport Advantage: IPLA, IBM International Passport Advantage Agreement (PAA), and an IBM International Passport Advantage Agreement Enrollment Form Transferable: Yes, except for programs acquired at a discount or allowance Limited Warranty Applies: Yes Guarantee: Two months Usage Restriction: Yes. Usage is limited to the quantity of Tivoli Management Points acquired for a OTC. You are authorized to install and use Tivoli Intrusion Manager to manage up to 20 devices (servers, routers, or switches). If you wish to manage more than 20 devices you must acquire additional full use authorizations. DB2 Components The Tivoli Intrusion Manager program includes portions of DB2 Universal Database with the program ship group. You are authorized to install and use one copy of these components only in association with your licensed use of Tivoli Intrusion Manager for the storage and management of data used and generated by the Program, and not for other data management purposes. For example, this license does not include inbound connections to the database from other applications for queries or report generation. You are authorized to install and use these components only with Tivoli Intrusion Manager. You can only use Crystal Reports for report generation and not for other data management purposes. Volume Offering (IVO): No Upgrade Protection Applies: Covered as long as Tivoli Support or Passport Advantage Software Maintenance is in effect Educational Allowance Available: education institution customers Percentage: 15% Licensed Program Materials Availability Restricted Materials of IBM: None Non-Restricted Source Materials: None Object Code Only (OCO): All Maintenance Applies Yes, to qualified Software Maintenance under Passport Advantage: Yes Support for Tivoli products: Yes Complementary Introductory Support: Not available Tivoli Support and Passport Advantage Software Maintenance: Support Center applies: Yes Access is available through the IBM Support Center, Availability of The first year of Tivoli Tivoli Support: Support is available at no additional charge. The first year starts when the product is shipped to the customer. Subsequent years of Tivoli Support are available for a fee as part of the IAAS, IIAAPS, or any equivalent agreement. Availability PA Software of PA Maintenance is provided at no Software additional charge for each Maintenance: eligible program acquired during the initial term. PA Software Maintenance is provided at an additional charge for all eligible programs in the second and subsequent terms

8 Tivoli Support and Twelve months after PA Software announcement of product Maintenance are discontinuance, (that is, available until: end-of-life (EOL)) Tivoli Support and The current release Passport Advantage The immediate previous Software Maintenance release for twelve months are applicable to: after the general availability of the current release APAR Mailing Address: Tivoli Systems Inc Burnet Road Austin, TX USA Attention: Product Development IBM Operational Support Services Support Line: No Product Web Site: A complete list of products, terminology definitions, and licensing documents are available at the following Web site: Prices Contact your IBM representative for prices information for this announcement. Use Priority/Reference Code: YE001 Phone: Fax: Internet: Mail: 800-IBM-CALL 800-2IBM-FAX ibm direct@vnet.ibm.com IBM Atlanta Sales Center Dept. YE001 P.O. Box 2690 Atlanta, GA Order Now You can also contact your local IBM Business Partner or IBM representative. To identify them, call 800-IBM-4YOU. Note: Shipments will begin after the planned availability date. Trademarks DB2, REDBOOKS, and DB2 Universal Database are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Windows NT and Windows are registered trademarks of Microsoft Corporation. Tivoli is a registered trademark of International Business Machines Corporation or Tivoli Systems Inc. in the United States or other countries or both. Other company, product, and service names may be trademarks or service marks of others