"Network Security is an intuitive, exit point control software that allows us to really lock down our iSeries."
Emily Shellabarger
First Security Bank, Vice President
OVERVIEW
First Security Bank is one of Montana's largest, locally owned community banks. They provide business, real estate, consumer and agricultural loans, Internet banking, brokerage services, and a full range of deposit accounts.
CHALLENGE
First Security has over 150 users on an 810 iSeries that runs banking applications from Fiserv CBS Worldwide. The firewall they had in place for their iSeries was protecting their network from the “outside,” but they knew that was only half the battle.
First Security Bank users accessed the network through interfaces such as FTP and ODBC. Monitoring and controlling these types of activities were necessary, but extremely time consuming. The consequences included inconsistent enforcement of their corporate security policy throughout their network. In order to effectively enforce compliance of their own internal policies, they needed a solution that would provide constant and efficient access monitoring and, as well, provide automated reports.
SOLUTION
First Security Bank chose PowerTech, a Fiserv CBS Worldwide partner, to resolve their iSeries security challenges.
The First Security Bank solution included the following PowerTech product:
Network Security — Provides the tools to efficiently enforce a standard corporate privacy policy. Rules to restrict access to their servers could be set without impacting daily operations, including rules that limit the use of FTP and ODBC to specific users, groups, and IP addresses.
RESULTS
For First Security Bank, PowerTech delivered:
Consistent monitoring and control of internal access to their iSeries
The ability to let users change their “active user” from the command line and gain higher authority on a temporary basis, using the Dynamic Authority Manager feature
Audits and reports on the temporary authority changes to maintain compliance with regulations
Automated, real-time alerts to notify managers of security violations
