IV92989: SUPPORT FOR 3270 INTRUSION DETECTION SERVICE

Communications Server for Data Center Deployment, Version 7 -- Latest PTFs/Fixpack

APAR status

• Closed as program error.

Error description

• Communications Server for Data Center Deployment, V7
  ----------------------------------------------------
  The Communications Server for Data Center Deployment can support
  z/OS APARS for 3270 Intrusion Detection Service. The z/OS
  Communications Server that the CSDCD TN3270 Server connects to
  must support one of the pairs of APARs listed below:
  
      - OA49911 and OA50623
      - OA48802 and OA50623
  
  The 3270 IDS for the CSDCD TN3270 Server will prohibit TN3270
  clients from queuing responses and data to the host. This
  function may change the behavior of some existing client/server
  flows. Be aware that the change may be needed to detect 3270
  data intrusion violations. To set the 3270 IDS support for a
  CSDCD TN3270 Server implementation, in the environment file,
  /etc/sna/environment, set the following statement:
  
  export TN_INTRUSION_DETECTION=1
  
  After setting this variable in the environment file, the
  communications server must be stopped and restarted. This will
  configure the TN3270 Server to prevent clients from queuing
  responses and data to the host that could cause z/OS
  Communications Server 3270 IDS to flag a violation.
  

Local fix

Problem summary

• See description.
  

Problem conclusion

• See description.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  LI79483 JR58742

Fix information

• Fixed component name

  CS DCD AIX 7.X

• Fixed component ID

  5725H3200

Applicable component levels

• R700 PSY U876419

     UP17/03/16 I 1000