MQ Enterprise Security Suite Overview
The MQ Enterprise Security Suite (MQESS) is a solution that provides authentication and data protection (Channels and Queues) for IBM MQ.
MQ Enterprise Security Suite is comprised of:
- MQ Authenticate Security Exit for Authentication
- Authenticate a user's UserID and Password against:
- Server's native OS system (Local OS)
- Remote LDAP server
- Microsoft's Active Directory
- Quest Authentication Services* (QAS) aka Vintela Authentication Services* (VAS)
- Centrify's DirectControl*
- PAM* (Pluggable Authentication Module)
- An encrypted MQAUSX FBA file.
- Allows or restricts the incoming UserID against a Group
- Provides support for Proxy UserIDs
- Ability to assign a Password to a queue manager for client authentication
- Allow or restrict the incoming 'IP address', 'UserId', 'hostname', 'SSL DN' & 'AD Server Name'** against a regular expression pattern
- Reject the incoming 'IP address', 'UserId', 'hostname', 'SSL DN' & 'AD Server Name'** against a regular expression pattern
- Allows or restricts the use of ‘mqm’, ‘MUSER_MQADMIN’ or ‘QMQM’ UserIDs
- Ability to use a Credential Cache to speed up authentication
- Ability to turn off server-side authentication
- Includes a CHAD exit used to secure cluster channels
- Ability to set the maximum number of allowable connections per a given channel (MCC)
- Ability to monitor for excessive client connections (ECC) and then generate an alert
- Provides monitoring tool tie-in by using custom MQ event messages
- Provides logging capability for all connecting client applications regardless if they are successful or not.
- MQ Channel Encryption for Data Protection for Channels
- Can be configured as either queue manager to queue manager or client application to queue manager solution
- For both modes, all message data flowing over a channel will be encrypted (nothing missed or forgotten)
- Secure encryption/decryption methodology using AES with 128, 192 or 256-bit keys
- Easy to set up and configure (unlike SSL)
- No application changes required
- Uses the SHA-2 to create a cryptographic hash function (digital signature)
- Standard MQ feature, GET-with-Convert, is supported
- Provides high-level logging capability for encryption / decryption processing
- MQ Message Encryption for Data Protection for Queues
- All message data written to a selected queue will be encrypted (nothing missed or forgotten)
- Secure encryption/decryption methodology using AES with 128, 192 or 256-bit keys
- Easy to set up and configure (unlike SSL)
- No application changes required
- Group authority checking against the local OS groups or a group file
- Standard MQ feature, GET-with-Convert, is supported
- Provides high-level logging capability for encryption / decryption processing
- Major features are:
* Unix only
** Windows only
- Major features are:
- Major features are:
MQESS will operate with IBM MQ v7.1, v7.5, v8.0, v9.0, v9.1, v9.2, v9.3 and v9.4 in Windows, IBM i (OS/400), Unix and Linux environments.
Pricing
- The MQESS server-side components are provided in the format of a native DLL / shared library and are currently available for AIX, HP-UX, IBM i (OS/400), Linux, Solaris and Windows. The pricing of MQESS is on a 'per queue manager' basis.
| Operating System | |
| AIX v7.1 or higher | 64-bit |
| IBM i v7.1 or higher | 64-bit |
| HP-UX IA64 v11.23 or higher | 64-bit |
| Linux x86 | 32-bit |
| Linux x64 | 64-bit |
| Linux on POWER | 64-bit |
| Linux on System z (zSeries) | 64-bit |
| Raspberry Pi (ARM) | 32-bit |
| Solaris SPARC v10 & v11 | 64-bit |
| Solaris x64 v10 & v11 | 64-bit |
| Windows 7, 8, 8.1, 10 & 11 | 32-bit & 64-bit |
| Windows Server 2008, 2012, 2016, 2019 & 2022 | 32-bit & 64-bit |
- The MQESS client-side components are included for FREE and can be distributed to an unlimited number of remote servers or PCs with MQ client applications (the user only pays for the server-side licenses).
| Product | Price (USD) * | Ordering |
| MQ Enterprise Security Suite (per license**) | $999.00 | |
| Yearly maintenance and support fee | 15% | |
| Total | $1149.00 |
* Volume discounts available for as low as $799.00 USD per license plus 15% yearly maintenance and support fee.
** MQ Enterprise Security Suite is licensed on a per queue manager basis.
- Each licensed user will receive:
- Full version of MQ Enterprise Security Suite
- Free updates / upgrades to any version 2.x release.
- Email/ Help Desk support
| Enterprise License for MQ Enterprise Security Suite: |
| Enterprise License for MQ Enterprise Security Suite sells for $180,000 USD plus 15% yearly maintenance and support fee. An enterprise license will allow a company to have unlimited number of queue managers use MQESS at an unlimited number of locations. |