IBM Security Guardium S-TAP for IMS

The architecture comprises the S-TAP agent, the Guardium collector, and the Guardium management console. The S-TAP agent, deployed on z/OS, intercepts IMS database calls and captures relevant data. It communicates with the Guardium collector via TCP/IP, using a proprietary protocol for secure data transmission.

The Guardium collector processes the data, storing it in a database for reporting and analysis. The Guardium management console provides a centralized interface for configuration, monitoring, and reporting. Key configuration parameters include connection details for the Guardium collector, filtering rules to specify which events to capture, and logging levels.

The product uses encryption for data transmission between the S-TAP agent and the Guardium collector. The Guardium collector stores data in a relational database, enabling detailed analysis and reporting. conf`, are used to define the operational parameters.

The product does not expose a public API for direct integration; instead, it relies on the Guardium collector's APIs for data access and management.