Luminet Modernization Guide

Luminet is a security monitoring product that captures user activity within applications. It acts as a network sniffer, monitoring traffic such as TN3270, SNA LU0, SNA LU6.2, Websphere MQ, HTTP, HTTPS, and TCP/IP to track keystrokes and screen data.

Luminet is an application that provides security monitoring capabilities. It is built upon network sniffing technology to capture and analyze user interactions with applications.

Organizations that require detailed monitoring of user activity within applications, especially those using protocols like TN3270, SNA, and WebSphere MQ, would benefit from Luminet. This includes organizations in regulated industries needing to track data access and usage.

A company should consider Luminet when they need to monitor user activity for compliance, security, or auditing purposes. It is particularly useful when the organization uses a mix of mainframe and distributed applications.

Alternatives to Luminet include network monitoring tools and security information and event management (SIEM) systems. Examples are IBM Security QRadar, Splunk, and Wireshark. Luminet distinguishes itself by focusing on application-level monitoring, including specific mainframe protocols.

Luminet requires a network infrastructure that supports traffic mirroring or sniffing. It needs to be positioned on the network to capture traffic from protocols such as TN3270, SNA LU0, SNA LU6.2, WebSphere MQ, HTTP, HTTPS, and TCP/IP. It also requires a Windows or UNIX-based server for the Luminet application itself.

Luminet can monitor traffic in an LPAR if the network is configured to mirror the traffic to the Luminet server. It is not z/OS dependent in the sense that it runs on a separate Windows or UNIX server, but it monitors z/OS applications via network traffic.

Luminet integrates with systems by capturing network traffic and analyzing it. It can integrate with SIEM systems by forwarding security events and logs. It can also integrate with user authentication systems to correlate network activity with user identities.

The main components of Luminet include the network sniffer, the data processing engine, the storage database, and the user interface. The network sniffer captures traffic, the data processing engine analyzes it, the storage database stores the data, and the user interface provides access to the data.

Luminet provides business value by enabling organizations to monitor user activity, detect security threats, and comply with regulations. It helps to identify insider threats, prevent data breaches, and improve overall security posture.

Without Luminet, organizations may lack visibility into user activity within applications, making it difficult to detect security threats and comply with regulations. This can lead to data breaches, financial losses, and reputational damage.

Luminet helps organizations meet compliance requirements by providing detailed audit trails of user activity. This information can be used to demonstrate compliance with regulations such as PCI DSS, HIPAA, and GDPR.

Luminet supports authentication methods such as Active Directory, LDAP, and local user accounts. It uses role-based access control (RBAC) to manage user permissions. Encryption is used to protect sensitive data in transit and at rest.

Luminet provides comprehensive audit logging capabilities, recording all user activity and system events. These logs can be used to investigate security incidents and identify potential vulnerabilities.

Luminet protects sensitive data by encrypting it both in transit and at rest. It also uses access controls to restrict access to sensitive data based on user roles and permissions.

Luminet requires ongoing monitoring to ensure that it is capturing and analyzing network traffic correctly. It also requires regular maintenance to apply security patches and updates. Staffing requirements include network administrators and security analysts.

Common implementation challenges include configuring network traffic mirroring, integrating with existing security systems, and training staff on how to use the product. It is important to plan the deployment carefully and test it thoroughly before going live.

Luminet provides administrative interfaces such as a web console and a command-line interface (CLI). User management is handled through the web console, where administrators can create and manage user accounts and roles.