The SafeNet main menu provides access to all application functions and is your starting place for working with exit point security.

Exit point settings is where you work with all registered exit point - controlling SafeNet security levels for each. Level 1 is logging only, Level 2 disables the exit point, Level 3 support user-based access controls and Level 4 support complex controls combining user and object authority.

SafeNet supports filtering of access attempts including IP-based filters, time of day and even verb-level filters for SQL, FTP and CL commands.

Access controls can be created for user or group profiles - covering everything from basic access to complex object rules/authorities and even controls for specific IFS paths.

While the default controls setup is based on a user-first approach, SafeNet also supports an object-first approaching to creating security rules.

SafeNet includes a sophisticated "what if" scenario builder that lets you test your controls against historical log data before making them live. This is essential for designing controls that don't disrupt the business.

SafeNet's integrated MFA module provides additional access controls for powerful users connecting through 5250 login and also network access to SQL, FTP, TELNET and server SIGNON.

SafeNet integrates with Kisco's kConnect API software to enable true two-may mobile authentication with DUO.

The ransomware monitor detects potential ransomware events based on pattern matching in the IFS exit point log data. It raises alerts for possible events and can even take automatic action like blocking a user.

Ransomware pattern matching jobs are customizable for performance tuning and specific business needs. Each job can have separate automated responses. SafeNet also offers a "honey pot" option to entrap attackers.

All exit point, MFA and ransomware activities are logged in real-time to the SafeNet activity log. Data can sent to a SIEM platform, queried for reporting data and configured to send Email or SMS alerts.