Z-TAP is installed on a z/OS mainframe server hosting a DB2 database that is to be audited by Guardium for Mainframes. Z-TAP monitors database traffic based on rules that are set by the Guardium policy. Information about database transactions that fit defined policy rules is forwarded to the Guardium appliance, which can be installed anywhere on the network.
Only a minimal amount of configuration information is needed to install Z-TAP on the mainframe database server. A limited range of system management commands can be invoked from within z/OS, but once Z-TAP is installed, most configuration and user functions are performed from within the Guardium interface on the appliance.
The Guardium for Mainframes Z-TAP component is developed by NEON Enterprise Software under a partnership agreement. Z-TAP monitors mainframe database activity, applying rules developed in the Guardium product, and returns audit trace information to the Guardium appliance for analysis and reporting.
The Z-TAP Guide explains how to install, configure, and administer the Guardium for Mainframes Z-TAP component on a z/OS mainframe system. This document is intended for Guardium appliance administrators, z/OS system programmers, database administrators, auditors, or others responsible for installing or maintaining Guardium for Mainframes Z-TAP. For configuration and administration of Guardium Z2000 appliance, please refer to the following Guardium guides:
Z-TAP is architected for optimal performance so that auditing activities never impact normal business transaction processing. Key performance features include:
use of zIIP co-processors when available
no reliance on slow, resource-intensive database trace utilities
use of a network appliance server, Z2000, for analysis, reporting, and data storage