MQ Standard Security Exit Overview
The MQ Standard Security Exit v2.6.0 is a solution that allows a company to control and restrict who is accessing an IBM MQ resource. The security exit will operate with IBM MQ v7.1, v7.5, v8.0, v9.0, v9.1, v9.2, v9.3 and v9.4 in Windows, IBM i (OS/400), Unix and Linux environments. It works with Server Connection, Receiver, Requester and Cluster-Receiver channels of IBM MQ queue manager.
The MQ Standard Security Exit solution is comprised of a server-side security exit.
On AIX, HP-UX, Linux, Solaris and Windows, MQSSX can be configured and used with a non-default installation of MQ in a multi-install MQ environment.
Server-Side Security Exit Summary
- The server-side security exit is available in 3 forms:
- Windows DLL
- Shared library for AIX, HP-UX, Linux and Solaris
- IBM i (OS/400) exit module
- The server-side security exit major features are:
- Allow or restrict the incoming UserID against a regular expression pattern
- Allows or restricts the incoming UserID against a Group
- Support for Proxy UserIDs
- Allow or restrict the incoming IP address against a regular expression pattern
- Allow or restrict the incoming hostname against a regular expression pattern
- Allow or restrict the incoming SSL DN against a regular expression pattern
- Limit the number of incoming channel connections on a SVRCONN channel.
- Allow or restrict the use of 'mqm', 'MUSER_MQADMIN' or 'mqm' UserIDs
- Includes a CHAD exit used to secure cluster channels
- Ability to set the maximum number of allowable connections per a given channel (MCC)
- Ability to monitor for excessive client connections (ECC) and then generate an alert
- Provides monitoring tool tie-in by using custom MQ event messages
- Provides logging capability for all connecting client applications regardless if they were successful or not.
Pricing
- The server-side security exits are provided in the format of a native DLL / shared library and are currently available for AIX, HP-UX, IBM i (OS/400), Linux, Solaris and Windows. The pricing of Capitalware's MQ Standard Security Exit solution is on a 'per queue manager' basis.
| Operating System | |
| AIX v7.1 or higher | 64-bit |
| IBM i v7.1 or higher | 64-bit |
| HP-UX IA64 v11.23 or higher | 64-bit |
| Linux x86 | 32-bit |
| Linux x64 | 64-bit |
| Linux on POWER | 64-bit |
| Linux on System z (zSeries) | 64-bit |
| Raspberry Pi (ARM) | 32-bit |
| Solaris SPARC v10 & v11 | 64-bit |
| Solaris x64 v10 & v11 | 64-bit |
| Windows 7, 8, 8.1, 10 & 11 | 32-bit & 64-bit |
| Windows Server 2008, 2012, 2016, 2019 & 2022 | 32-bit & 64-bit |
| Product | Price (USD) * | Ordering |
| MQ Standard Security Exit (per license**) | $249.00 | |
| Yearly maintenance and support fee | 15% | |
| Total | $286.00 |
* Volume discounts available for as low as $149.00 USD per license plus 15% yearly maintenance and support fee.
** MQ Standard Security Exit is licensed on a per queue manager basis.
- Each licensed user will receive:
- Full version of MQ Standard Security Exit
- Free updates / upgrades to any version 2.x release.
- Email/ Help Desk support
| Enterprise License for MQ Standard Security Exit: |
| Enterprise License for MQ Standard Security Exit sells for $45,000 USD plus 15% yearly maintenance and support fee. An enterprise license will allow a company to have unlimited number of queue managers use MQ Standard Security Exit at an unlimited number of locations. |