Installation Prerequisites

System Values

It is Powertech’s goal not to change system values on customer systems because we recognize that security-conscious organizations have rigorous change control processes in place for even small changes to system values. Therefore, we ask you to make any system value changes that are needed. However, the Network Security installation process could change a system value to allow the install to proceed if a system value is not set as specified below. If the Installation Wizard changes a system value during install, it changes it back to its original value when the install completes.

To install Powertech Network Security on your system, the following system values that control object restores must be configured as shown.

  • Set QALWOBJRST to *ALWPGMADP (at a minimum) to allow the system to restore programs that adopt authority. Many Powertech Network Security programs adopt the authority of the product owner, rather than forcing you to give authority directly to administrators and end users.
    NOTE: For some system configurations, *ALL is required temporarily.
  • QALWUSRDMN controls which libraries on the system can contain certain types of user domain objects. You should set the system value to *ALL or include the name of the Network Security product library (PTNSLIB07 or PTNSLIB and QTEMP as a minimum) for the product to function properly.
  • Set QVFYOBJRST to 1, 2, or 3. This allows Network Security to restore all objects regardless of their signature. (Note: If you normally check signatures, remember to check this system value after the Network Security install process completes.)
  • Set QFRCCVNRST (Force conversion on restore) to 0, Do not convert anything.
  • Set QALWJOBITP (Allow jobs to be interrupted) to 1. This allows job to be interrupted to run user-defined exit programs. All new jobs that become active will default to be uninterruptible.

Auditing

Before installing Network Security, you should set up a journal to record Network Security's transaction auditing data.

System Requirements

Network Security requires the following:

NOTE: For a list of browsers supported by Network Security's Insite web interface, see Web Browser Help.
  • IBM i (i5/OS, OS/400) version V7R1 or higher
  • 256 MB of disk space
  • PASE (Portable Applications Solutions Environment), option 33
  • Current IBM-supported PTF level

ShowCase version 9.1.0.3 is required to use Network Security's ShowCase exit points.

HelpSystems Insite Web Browser Requirements

To use HelpSystems Insite to access your products through a web browser, you must meet the following browser and/or operating system requirements.

Hardware Type Minimum Browser and/or OS Requirements
Desktop/Laptop Firefox 11 or higher
Chrome 21 or higher
Internet Explorer 11
Safari 6.1 or higher
Microsoft Edge
Mobile Device iOS: Browsers on iOS 8 or higher
Android: OS4.4 or higher using Chrome
Windows: OS 10 using Edge
IBM i V7R1 or higher operating system

Dashboard Showing Transaction Counts

A feature of Network Security’s Insite web browser interface is the Dashboard.

The Dashboard displays a count of all transactions monitored or controlled by Network Security. The Dashboard displays the totals for the servers based upon the criteria selected by the user (today's totals, yesterday's totals, last 7 days or last 30 days). The user can also select to see the individual server's counts for the past 24 hours.

After installation of the web and WUI components and activation, the Dashboard Data Collector job does not start automatically. You must issue the PNSSTRDASH command. To start/end the Dashboard Data Collector job, use the following commands:

Start - PNSSTRDASH

End - PNSENDDASH

The Dashboard Data Collector can also be started in the Operational Status panel (by pressing F22 in the green screen).

If you end the Dashboard data collector using F22 and the End option, it will not restart automatically. You must manually restart it using F22 or the PNSSTRDASH command.

NOTE: After an IPL, you must run this command in order to restart the Dashboard Data Collector.

Operation of the Dashboard Data Collector job can also be controlled with the following commands:

PNSHLDDASH - Use this command, Hold Dashboard Collection, to set the system in a state such that data collection to support the web interface Dashboard will not run.

PNSRLSDASH - Use this command, Release Dashboard Collection, to release the Dashboard Data Collector, allowing data collection to occur.

 

Copyright © HelpSystems, LLC.
All trademarks and registered trademarks are the property of their respective owners.
7.16 | 201712120915