Mainframe Networks- An Introduction [MOPS]

This course introduces the issues, problems, and solutions to the challenges in integrating SNA and TCP/IP networks.  Emphasis is placed on open standard solutions (via RFCs,) although some innovative vendor-specific solutions are also included.  All variations of SNA are covered, including subarea SNA and APPN (including APPN/HPR). This course is primarily concerned with identifying the areas of difficulty and suggesting standard solutions to overcome these, the aim is to provide attendees with the background information necessary to make sensible choices for their own networks.  

3 Days 

Hands-On

Private-Only

Email at Info@zcubedtech.com  to find out more

• Introduction
• Bridge and Router Solutions
• Gateway solutions
• Internet/Intranet connectivity solutions

• Describe the major characteristics of SNA and TCP/IP networks
• Identify network integration objectives
• Describe the addressing and naming schemes used in SNA and TCP/IP networks
• Identify the differences between transparent bridges and source route bridges
• Explain how SNA and TCP/IP can share a common bridged network via X.25, Frame Relay, and ATM
• Explain how SNA/APPN and TCP/IP can be routed via multiprotocol routers
• Describe how subarea SNA can be routed over TCP/IP using Data Link Switching
• Describe how TCP/IP traffic can be routed over SNA using NCP as a router
• Explain the operation of a gateway and describe the major gateway configurations
• Describe how TCP/IP for MVS and VTAM act as a host gateway, and how Microsoft's SNA Server acts as a LAN gateway
• Explain how a network gateway operates and state the two main varieties
• Explain the principles and operation of the Multi-Protocol Transport Network
• Describe how access to existing CICS and IMS applications can be provided from TCP/IP hosts via the CICS Client/Server and CICS Web Interface products
• Explain the principles and facilities of an SNA web co-processor
• Describe how existing SNA green-screen user interfaces can be easily upgraded 

Existing knowledge of either (or both) SNA and TCP/IP are highly desirable, although a review of the operation of these networks is provided

Email at Info@zcubedtech.com  to find out more

Large system network security requirements have become much more stringent and complex over recent years, following the advent of TCP/IP and Internet interfaces. This essential course explains how to set up and administer vitally important security for the z/OS networking environment. The course gives attendees a sound understanding of how the Communications Server, along with other elements in z/OS including RACF, Policy Agent (PAGENT), z/OSMF and the Network Configuration Assistant, provide multiple IP security functions. These protect data privacy and integrity for z/OS, and protect system resources from unauthorized access.

5 Days

Hands-On

$3,200

Email at Info@zcubedtech.com  to find out more

• Understanding RACF Network Security
• RACF Group Structure
• Defining Users to RACF
• Dataset Profiles
• Defining General Resources
• Protecting Network Resources
• Cryptography, SSL, Ciphers & Digital Certificates
• SSHD and SFTP using SSL
• RACF & Digital Certificates
• Secured TN3270 and FTPS
• Introduction to Policy Agent
• z/OSMF and Network Configuration Assistant
• IP Security
• Intrusion Detection Services & Defense Manager Daemon

On completing this course attendees will be able to: 

• Understand how RACF works
• Explain how z/OS SAF, especially RACF, is used to protect your network and communications
• Discuss the RACF Security profiles required to protect access to various network resources
• Understand how crytography, Ciphers and SSL/TSL work in a z/OS environment
• Explain how to implement the TLS and SSL protocol technology to protect data exchanges between client and server applications
• Implement the SSH daemon and SFTP
• Describe how digital certificates can be implemented and used within z/OS and how various clients and servers use the certificates
• mplement Native TN3270/TLS security and Native FTPS/TLS security
• Explain how Digital Certificates are used in a policy-based z/OS environment
• Explain the rules and policies used in the Policy Agent (PAGENT) to dictate how users, applications and organizations access and use their IT resources
• Understand how the PAGENT can be configured as a Central Policy Server
• Understand how to use z/OSMF and Network Configuration Assistant
• Implement TN3270/Telnet security and FTPS using AT-TLS
• Explain how other applications use AT/TLS with PAGENT
• Implement IP Security
• Implement TRMD and IKED
• Permit or deny IP packets into and out of z/OS using IP Filtering
• Describe at a high level how the IPSec tunnel traverses a NAT or NAPT device
• Implement IDS
• mplement DMD
• Describe the QoS concepts and how to implement QoS

 A sound knowledge of TCP/IP concepts and protocols. This can be gained by attending the course TCP/IP Fundamentals [CTCP] or TCP/IP in a z/OS environment. This can be gained by attending TCP/IP for z/OS – Implementation [CTMZ]   A good knowledge of UNIX System Services is also needed, which can be gained by attending the course Using RACF under UNIX System Services [RAUX]. 

"Detailed & documentation aligned nicely with the labs and the instructor's presentation was awesome. Thank you for providing this wonderful training experience!"

"This class was just excellent."

Email at Info@zcubedtech.com  to find out more