Security

The z/OS® Communications Server, along with other elements of z/OS, provide numerous enterprise-strength security services to protect your mission-critical data. This topic provides an overview of these technologies and how they can be used for a safe and secure z/OS TCP/IP deployment.
Figure 1. Elements of a secure TCP/IP deployment
Overview of TCP/IP security technologies
Tip: Many of the tasks, examples, and references in this information assume that you are using the z/OS Security Server (RACF®). References to RACF apply to any other SAF-compliant security products that contain the required support. If you are using another security product, read the documentation for that product for instructions on task performance.

The Communications Server protects data and other resources on the system. Communications Server applications use RACF services to ensure that users requesting application access are identified and authenticated, and to protect data and other system resources from unauthorized access. The Communications Server safeguards the availability of the system by protecting against denial of service attacks from the network.

The Communications Server protects data in the network by supporting a variety of cryptographic-based network security protocols such as IPSec, SSL, and SNA Session Level Encryption. These security protocols ensure that data received is originated by the claimed sender (data origin authentication), that contents were unchanged in transit (message integrity), and that sensitive data is concealed using encryption (data privacy).

The Communications Server provides security event reporting to record potential security violations. These services may help you identify potential sources of subsequent attacks, respond more quickly to network attacks, and manage system resources during periods of high network traffic for key applications.

Note: Some of the security features described in this information have not yet been implemented for IPv6. To determine which functions are supported for IPv6, see the IPv6 support tables in z/OS Communications Server: IPv6 Network and Application Design Guide.