Introduction to Networking for NonStop S-Series Servers

Managing Communications Subsystems
Introduction to Networking for HP NonStop S-Series Servers—520670-005
4-19
Security Management
SCF also has features that support performance management. For example, you can
use SCF to obtain statistics related to performance and resource consumption. You
can use SCF to improve performance by adjusting the values of object attributes.
Because several of the subsystems that support SCF have equivalent programmatic
interfaces, you can also perform these functions programmatically.
The Availability Statistics and Performance (ASAP) monitoring tool provides graphical
and tabular displays of system performance and network-object performance, object
state, and entity threshold information. The Availability Statistics and Performance
Extension (ASAPX) product integrates and extends ASAP monitoring capabilities to
single and multinode application environments. For more information about ASAP,
refer to the following manuals: ASAP Client Manual, ASAP Server Manual, ASAP
Extension Manual, and ASAP Migration Guide for NSX and OMF Users.
Security Management
HP and Atalla Corporation, a HP subsidiary, also offers products that protect the
security of some system and network resources. Atalla offers encryption products for
NonStop S-series servers. For more information about Atalla products, see your HP or
Atalla representative and product literature.
The Safeguard product lets you secure running processes and devices by granting
access authority to only a specified set of users. Safeguard also prevents unauthorized
users from logging onto the system.
NonStop NET/MASTER MS includes User ID Management Services (UMS), which
maintains an encrypted profile that allows your system manager or security
administrator to control operator access to functions and commands. Individual
operator profiles can be set up to limit access to specific subsystem commands; UMS
automatically tailors individual operator menus to display only authorized functions.
Operators can even be restricted from using specific commands at certain times of the
day or be limited to certain terminals. NonStop NET/MASTER MS software also
maintains a detailed audit trail of operator commands, responses, and sign-on
attempts entered from a terminal or through NCL procedures.
Other management products also have security features. For instance, SCF uses
sensitive commands, which only certain users can perform. (In general, a sensitive
command is one that affects the state or configuration of an object.) SCF also lets you
log commands and responses for later review.
Finally, the Distributed Name Service (DNS) lets you specify the domain of a name,
that is, the list of nodes that have copies of the name and related information. You can
use this feature to restrict the set of users who can refer to an object or find information
about it.