IBM Security Access Manager V7.0 and IBM Security Web Gateway AMP 5100 V7.0 deliver improved web application security with an integrated web access management, application protection, and context-based access control platformIBM United States Software Announcement 212-438November 13, 2012
IBM® Security Access Manager V7.0:
IBM Security Web Gateway AMP 5100 V7.0 appliance is designed to provide access, authentication, and session management for web applications, and to help protect those applications from external threats. For ordering, contact Your IBM representative or an IBM Business Partner. For more information contact the Americas Call Centers at 800-IBM-CALL (426-2255). Reference: YE001  Back to top
IBM Security Access Manager V7.0 (formerly known as IBM Tivoli® Access Manager for e-business) is a converged user access and application protection solution that serves as an authentication and authorization hub for web applications and centralized security management, designed to make it easier and more cost effective to deploy secure online applications. IBM Security Access Manager can help you address the growing incidence of advanced web threats and risks associated with mobile, social, and cloud access while demonstrating compliance with security regulations. It can also help you manage growth and complexity of web application environments, control escalating management costs, and address the difficulties of implementing security policies across a wide range of web and application resources. IBM Security Access Manager works as a proxy in front of web applications to centrally manage web applications, or through authorization and authentication plug-ins added directly into a web server or application server. Key capabilities:
What is new For the many new enhancements in IBM Security Access Manager V7.0, refer to the Description section for details. IBM Security Web Gateway AMP 5100 V7.0 is a next generation web access management offering, in the form of a physical appliance, designed to provide access, authentication, and session management for web applications and helps protect those applications from external threats. IBM Security Web Gateway AMP 5100 includes a reverse HTTP proxy (WebSEAL) that is located between users and application servers. This proxy comes with its own policy server (managed via a local management interface) and LDAP registry, but clients can, and often will, use the co-requisite IBM Security Access Manager product as an alternate, easily managed external policy server, and IBM Directory Server as an external registry (or other supported external registry). IBM Security Web Gateway AMP 5100 is highly scalable and configurable to support a wide variety of application environments. Back to top
For details, refer to the Hardware and software requirements section. Back to top
November 16, 2012: For electronic availability for IBM Security Access Manager V7.0 December 14, 2012: For physical availability for IBM Security Access Manager V7.0 and IBM Security Web Gateway AMP 5100 V7.0 Back to top
IBM Security Access Manager V7.0 IBM Security Access Manager V7.0 (formerly known as Tivoli Access Manager for e-business), an authentication and authorization hub for web applications, not only centralizes security management, but it can make it easy and more cost effective to deploy secure applications. IBM Security Access Manager V7.0 extends the ability to secure a heterogeneous application infrastructure while adding performance, scalability, and integration enhancements. IBM Security Access Manager delivers solutions to manage and enforce user access to a wide variety of web applications and services, varying from single sign-on to more highly scalable application security infrastructure deployments. Key features:
What is new IBM Security Access Manager V7.0 updates many existing features and introduces new features including virtual and physical appliance for the reverse proxy (WebSEAL) component. It provides:
IBM Security Web Gateway AMP 5100 V7.0 IBM Security Web Gateway AMP 5100 V7.0 is designed to provide access, authentication, and session management for web applications and to protect those applications from external threats. IBM Security Web Gateway AMP 5100 provides a proxy-based solution that is located between users and application servers. IBM Security Web Gateway AMP 5100 is highly scalable and configurable to support a wide variety of application environments. Key capabilities:
Accessibility by people with disabilitiesA US Section 508 Voluntary Product Accessibility Template (VPAT) containing details on accessibility compliance can be requested at Section 508 of the US Rehabilitation ActIBM Security Access Manager is capable as of December 14, 2012, when used in accordance with IBM's associated documentation, of satisfying the applicable requirements of Section 508 of the Rehabilitation Act, provided that any assistive technology used with the product properly interoperates with it. A US Section 508 Voluntary Product Accessibility Template (VPAT) can be requested on the following Web site Back to top
Program Program number VRM name 5724-C87 7.0.0 IBM Security Access Manager 5725-G50 7.0.0 IBM Security Web Gateway AMP 5100 Back to top
IBM training provides education to support many IBM offerings. Descriptions of courses for IT professionals and managers are on the IBM training website Call IBM training at 800-IBM-TEACH (426-8322) for catalogs, schedules, and enrollments. Back to top
Product information is available via the Offering Information website Also, visit the Passport Advantage® website Back to top
IBM Security Access Manager V7.0 A hardcopy publication for IBM Security Access Manager V7.0 Quick Start Guide is shipped with the product and is available in English, French, and Japanese. Softcopy publications for IBM Security Access Manager for Web V7.0 Quick Start Guide will be delivered on a separate publications CD-ROM with the basic machine-readable material, and is available in English, French, and Japanese. It can also be downloaded at electronic availability from The following English publications may be downloaded at general availability from the following website English publications:
French publications:
IBM Security Web Gateway AMP 5100 V7.0 Hardcopy publication for the following IBM Security Web Gateway V7.0 Quick Start Guide is shipped with the product and is available in English, French, Japanese, Brazilian Portuguese and Simplified Chinese.
It can also be downloaded at electronic availability from English publications:
All other national language publications will be available 30 days after general availability and may be downloaded from the following website The IBM Publications Center The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided. Payment options for orders are via credit card (in the US) or customer number for 20 countries. A large number of publications are available online in various file formats, and they can all be downloaded by all countries, free of charge. Back to top
Specified operating environmentHardware and software requirementsFor IBM Security Access Manager V7.0 and IBM Security Web Gateway AMP 5100 V7.0 hardware and software requirements, refer to the Detailed system requirements for a specific product report at The program's specifications and specified operating environment information may be found in documentation accompanying the program, if available, such as a readme file, or other information published by IBM , such as an announcement letter. Documentation and other program content may be supplied only in the English language. Planning informationSoftware Subscription and Support (also referred to as Software Maintenance) is included with licenses purchased through Passport Advantage and Passport Advantage Express® . Product upgrades and technical support are provided by the Software Subscription and Support (Software Maintenance) offering as described in the Agreements. Product upgrades provide the latest versions and releases to entitled software, and technical support provides voice and electronic access to IBM support organizations, worldwide. IBM includes one year of Software Subscription and Support (also referred to as Software Maintenance) with each program license acquired. The initial period of Software Subscription and Support (Software Maintenance) can be extended by the purchase of a renewal option, if available. PackagingIBM Security Access Manager V7.0 is distributed with:
IBM Security Web Gateway AMP 5100 V7.0 is distributed with:
This program, when downloaded from a website, contains the applicable IBM license agreement and License Information, if appropriate, and will be presented for acceptance at the time of installation of the program. For future reference, the license and License Information will be stored in a directory such as LICENSE.TXT. Security, auditability, and controlIBM Security Access Manager uses the security and auditability features of the operating system software. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities. Back to top
IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of our lab-based, software services team and the business consulting, project management, and infrastructure expertise of our IBM Global Services team. Also, we extend our IBM Software Services reach through IBM Business Partners to provide an extensive portfolio of capabilities. Together, we provide the global reach, intellectual capital, industry insight, and technology leadership to support a wide range of critical business needs. To learn more about IBM Software Services or to contact a Software Services sales specialist, visit Back to top
This product is only available via Passport Advantage . It is not available as shrinkwrap. Product group: IBM Security Product Identifier Description (PID) IBM Security Access Manager V7.0 5724-C87 IBM Security Web Gateway AMP 5100 V7.0 5725-G50 Product category: Security Access Manager Product category: Security Web Gateway Charge metric
Program name PID number Charge metric
IBM Security Access Manager 5724-C87 User Value Unit
Processor Value Unit
IBM Security Web Gateway AMP 5100 5725-G50 Per Appliance Install
Pricing examplesIBM Security Access Manager Example 1: Internal users (by UVU) A large enterprise is required to manage and protect access for 12,000 users on their internal network. The initial targets they want to manage are as follows:
Calculate User Value Units The client would purchase 8,500 User Value Units of Security Access Manager. Refer to the calculation below based on the scalable usage model referenced above.
Pricing metric Users required in User Value Units User Value Units
in client 1,000 users required
environment (A) (A*B)/1000
Tier 1 5,000 1,000 5,000
Tier 2 7,500 500 3,500
Tier 3 300
Tier 4 200
Total users 12,000 8,500
Example 2: Internal and external users (by UVU) A large enterprise is required to manage and protect user access for up to 12,000 internal users (company employees) and 1,500,000 external users. For external users, we use the ratio 1 internal user equals 15 external users to calculate the UVUs. The total users are calculated as follows:
Calculate User Value Units The client would purchase 32,900 User Value Units of IBM Security Access Manager. Refer to the calculation below based on the scalable usage model referenced above.
Pricing metric Users required in User Value Units User Value Units
in client 1,000 users required
environment (A) (A*B)/1000
Tier 1 5,000 1,000 5,000
Tier 2 10,500 500 5,000
Tier 3 35,000 300 10,500
Tier 4 62,000 200 12,400
Total users 112,000 32,900
In the above example, the client is entitled to the use of the reverse-proxy (WebSEAL) virtual appliance under the UVU entitlement. Example 3: Unknown number of internal and external users (by PVU) A large enterprise is required to manage and protect user access for an unknown number of internal or external users. However, the enterprise decides that running IBM Security Access Manager on 20 processor cores of an IBM POWER7® server for WebSEAL, policy server and LDAP would be the right number to sustain the external user load. The total PVUs are calculated as follows:
In the above example, the client is required to purchase PVU entitlements for the processors used for the deployment of the reverse-proxy (WebSEAL) virtual appliance. Example 4: Purchase IBM Security Web Gateway AMP 5100 appliance Client wants to buy IBM Security Web Gateway AMP 5100 and needs to buy additional PVUs of IBM Security Access Manager for hosting an external policy server and LDAP. A large enterprise is required to manage and protect user access for an unknown number of internal or external users. The enterprise decides to buy two IBM Security Web Gateway AMP 5100 appliances to be hosted in the DMZ. Additionally, the enterprise decides that they need to run IBM Security Access Manager Policy Server and IBM Tivoli Directory Server on four processor cores of an IBM POWER7 server. The pricing would be as follows:
User Value Unit (UVU) UVU is a unit of measure by which the program can be licensed. UVU Proofs of Entitlement (PoEs) are based on the number and type of users for the given program. Licensee must obtain sufficient entitlements for the number of UVUs required for licensee's environment as specified in the program specific table. The UVU entitlements are specific to the program and type of user and may not be exchanged, interchanged, or aggregated with UVU entitlements of another program or type of user. Refer to the program specific UVU table. Processor Value Unit (PVU) PVU is a unit of measure by which the program can be licensed. The number of PVU entitlements required is based on the processor technology (defined within the PVU table by processor value, brand, type, and model number at the website below) and the number of processors made available to the program. IBM continues to define a processor, for the purpose of PVU-based licensing, to be each processor core on a chip. A dual-core processor chip, for example, has two processor cores. The PVU table can be found at Licensee can deploy the program using either full capacity licensing or virtualization capacity (sub-capacity) licensing according to the Passport Advantage Sub-Capacity Licensing Terms (refer to the web page below). If using full capacity licensing, licensee must obtain PVU entitlements sufficient to cover all activated processor cores* in the physical hardware environment made available to or managed by the program, except for those servers from which the program has been permanently removed. If using virtualization capacity licensing, Licensee must obtain entitlements sufficient to cover all activated processor cores made available to or managed by the program, as defined according to the Virtualization Capacity License Counting Rules at * An activated processor core is a processor core that is available for use in a physical or virtual server, regardless of whether the capacity of the processor core can be or is limited through virtualization technologies, operating system commands, BIOS settings, or similar restrictions. Notes :
Appliance Install Appliance Install is a unit of measure by which the program can be licensed. An Appliance Install is an installed copy of the program that is included on a single unit of supporting hardware. Licensee must obtain an entitlement for each Appliance Install of the program. Passport Advantage
Part
Program name/Description number
IBM Security Access Manager for Web E02B1LL
Unlimited User Option Processor Value Unit
Linux on z Annual Sw Maint Rnwl
IBM Security Access Manager for Web D56PSLL
Unlimited User Option Processor Value Unit
Linux on z Lic+Sw Maint 12 Mo
IBM Security Access Manager for Web D56PTLL
Unlimited User Option Processor Value Unit
Linux on z Sw Maint Reinstate 12 Mo
IBM Security Access Manager for web E025XLL
Unlimited User Option Processor Value Unit
Annual Sw Maint Rnwl
IBM Security Access Manager for Web D55X7LL
Unlimited User Option Processor Value Unit
Lic+Sw Maint 12 Mo
IBM Security Access Manager for Web D55X8LL
Unlimited User Option Processor Value Unit
Sw Maint Reinstate 12 Mo
IBM Security Access Manager for Web E04NFLL
User Value Units Annual SW Maint Rnwl
IBM Security Access Manager for Web D03RLLL
User Value Units Lic+Sw Maint 12 Mo
IBM Security Access Manager for Web D03RMLL
User Value Units Sw Maint Reinstate 12 Mo
IBM Security Access Manager for Web for zEnterprise® D0AUVLL
BladeCenter Extension and Linux™ on System z
User Value Unit License + SW Subscription & Support
12 Months
IBM Security Access Manager for Web for zEnterprise D0AUULL
BladeCenter Extension and Linux on System z
User Value Unit SW Subscription & Support
Reinstatement 12 Months
IBM Security Access Manager for Web for zEnterprise E07PALL
BladeCenter Extension and Linux on System z
User Value Unit SW Subscription & Support Renewal
IBM Security Web Gateway AMP 5100 D0V7NLL
per App In APLIANCE + S&S 12 MO
IBM Security Web Gateway AMP 5100 E0F59LL
per App In ANNUALAPLM+S&S RNWL 12MO
IBM Security Web Gateway AMP 5100 D0V7PLL
per App In APLM + S&S REINST 12 MO
Passport Advantage customer: Media pack entitlement details Customers with active maintenance or subscription for the products listed are entitled to receive the corresponding media pack. Media packs description Part number IBM Security Access Mgr for Web 7.0 Mulitplatform, BJ12EML Multilingual DVD Media Pack Back to top
The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage Agreement, and the IBM Agreement for Acquisition of Software Maintenance. Reference to products in this announcement does not necessarily imply those products are available, or intend to be available, in your country. This product is only available via Passport Advantage . It is not available as shrinkwrap. LicensingIBM International Program License Agreement including the License Information document and PoE govern your use of the program. PoEs are required for all authorized use. Part number products only, offered outside of Passport Advantage , where applicable, are license only and do not include Software Maintenance. This software license includes Software Subscription and Support (also referred to as Software Maintenance). These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. IBM includes one year of Software Subscription and Support (also referred to as Software Maintenance) with the initial license acquisition of each program acquired. The initial period of Software Subscription and Support (also referred to as Software Maintenance) can be extended by the purchase of a renewal option, if available. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect. License Information form number
The program's License Information will be available for review on the IBM Software License Agreement website Limited warranty appliesYes Limited warrantyIBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program. IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, consult the IBM Software Support Handbook found at IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period). Program technical supportTechnical support of a program product version or release will be available for a minimum of five years from the general availability date, as long as your Software Subscription and Support (also referred to as Software Maintenance) is in effect. This technical support allows you to obtain assistance (via telephone or electronic means) from IBM for product-specific, task-oriented questions regarding the installation and operation of the program product. Software Subscription and Support (Software Maintenance) also provides you with access to updates (modifications or fixes), releases, and versions of the program. You will be notified, via announcement letter, of discontinuance of support with 12 months' notice. If you require additional technical support from IBM , including an extension of support beyond the discontinuance date, contact your IBM representative or IBM Business Partner. This extension may be available for a fee. Money-back guaranteeIf for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund. For clarification, note that (1) for programs acquired under the IBM International Passport Advantage offering, this term applies only to your first acquisition of the program and (2) for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you. Other termsVolume orders (IVO)No IBM International Passport Advantage AgreementPassport Advantage appliesYes, and through the Passport Advantage website at Usage restrictionYes. Usage is limited to the quantity of Value Units licensed. For additional information, refer to the License Information document that is available on the IBM Software License Agreement website Software Subscription and Support appliesYes. Software Subscription and Support (also referred to as Software Maintenance) is included with licenses purchased through Passport Advantage and Passport Advantage Express . Product upgrades and Technical Support are provided by the Software Subscription and Support offering as described in the Agreements. Product upgrades provide the latest versions and releases to entitled software and Technical Support provides voice and electronic access to IBM support organizations, worldwide. IBM includes one year of Software Subscription and Support with each program license acquired. The initial period of Software Subscription and Support can be extended by the purchase of a renewal option, if available. While your Software Subscription and Support is in effect, IBM provides you assistance for your routine, short duration installation and usage (how-to) questions, and code-related questions. IBM provides assistance via telephone and, if available, electronic access, only to your information systems (IS) technical support personnel during the normal business hours (published prime shift hours) of your IBM support center. (This assistance is not available to your end users.) IBM provides Severity 1 assistance 24 hours a day, 7 days a week. For additional details, consult your IBM Software Support Handbook at Software Subscription and Support does not include assistance for the design and development of applications, your use of programs in other than their specified operating environment, or failures caused by products for which IBM is not responsible under the applicable agreements. For additional information about the International Passport Advantage Agreement and the IBM International Passport Advantage Express Agreement, visit the Passport Advantage website at System i Software Maintenance appliesNo Variable charges applyNo Educational allowance availableNot applicable. Back to top
IT system security involves protecting systems and information through prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered destroyed or misappropriated or can result in misuse of your systems to attack others. Without a comprehensive approach to security, no IT system or product should be considered completely secure and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to be part of a comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective. IBM does not warrant that systems and products are immune from the malicious or illegal conduct of any party. Back to top
IBM has transformed its delivery of hardware and software support services to help you achieve higher system availability. Electronic Services is a web-enabled solution that offers an exclusive, no-additional-charge enhancement to the service and support available for IBM servers. These services are designed to provide the opportunity for greater system availability with faster problem resolution and preemptive monitoring. Electronic Services comprises two separate, but complementary, elements: Electronic Services news page and Electronic Services Agent. The Electronic Services news page is a single Internet entry point that replaces the multiple entry points traditionally used to access IBM Internet services and support. The news page enables you to gain easier access to IBM resources for assistance in resolving technical problems. The Electronic Service Agent™ is no-additional-charge software that resides on your server. It monitors events and transmits system inventory information to IBM on a periodic, client-defined timetable. The Electronic Service Agent automatically reports hardware problems to IBM . Early knowledge about potential problems enables IBM to deliver proactive service that may result in higher system availability and performance. In addition, information collected through the Service Agent is made available to IBM service support representatives when they help answer your questions or diagnose problems. Installation and use of IBM Electronic Service Agent for problem reporting enables IBM to provide better support and service for your IBM server. To learn how Electronic Services can work for you, visit Back to top
Business Partner information If you are an IBM Business Partner -- Distributor for Workstation Software acquiring products from IBM , you may link to Passport Advantage Online for resellers where you can obtain Business Partner pricing information. An IBM ID and password are required. IBM Business Partners will work through their IBM channel representative to enter an order in the SQO system for IBM Security Web Gateway. For Passport Advantage information, visit IBM Global FinancingIBM Global Financing offers competitive financing to credit-qualified customers to assist them in acquiring IT solutions. Offerings include financing for IT acquisition, including hardware, software, and services, from both IBM and other manufacturers or vendors. Offerings (for all customer segments: small, medium, and large enterprise), rates, terms, and availability can vary by country. Contact your local IBM Global Financing organization or visit IBM Global Financing offerings are provided through IBM Credit LLC in the United States, and other IBM subsidiaries and divisions worldwide to qualified commercial and government customers. Rates are based on a customer's credit rating, financing terms, offering type, equipment type, and options, and may vary by country. Other restrictions may apply. Rates and offerings are subject to change, extension, or withdrawal without notice. Financing from IBM Global Financing helps you preserve cash and credit lines, enables more technology acquisition within current budget limits, permits accelerated implementation of economically attractive new technologies, offers payment and term flexibility, and can help match project costs to projected benefits. Financing is available worldwide for credit-qualified customers. For more financing information, visit Back to top
To order, contact your local IBM representative or your IBM Business Partner. To identify your local IBM Business Partner or IBM representative, call 800-IBM-4YOU (426-4968). For more information, contact the Americas Call Centers.
Phone: 800-IBM-CALL (426-2255)
Fax: 800-2IBM-FAX (242-6329)
For IBM representative: callserv@ca.ibm.com
For IBM Business Partner: pwswna@us.ibm.com
Mail: IBM Teleweb Customer Support
ibm.com® Sales Execution Center, Americas North
3500 Steeles Ave. East, Tower 3/4
Markham, Ontario
Canada L3R 2Z1
Reference: YE001
The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products. Note: Shipments will begin after the planned availability date. TrademarksElectronic Service Agent is a trademark of IBM Corporation in the United States, other countries, or both. IBM, Tivoli, Passport Advantage, Express, POWER7, zEnterprise and ibm.com are registered trademarks of IBM Corporation in the United States, other countries, or both. Microsoft is a trademark of Microsoft Corporation in the United States, other countries, or both. Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both. Other company, product, and service names may be trademarks or service marks of others. Terms of useIBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Additional terms of use are located at For the most current information regarding IBM products, consult your IBM representative or reseller, or visit the IBM worldwide contacts page 
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
ENUS212-438.PDF
