ACF2 Reviews

Name: ACF2
Brand: Broadcom
Rating: 4.5 (6 reviews)

4.5 out of 5

6 reviews
100% willing to recommend

427 followers

What is ACF2?

CA ACF2™ for z/OS provides innovative, comprehensive security for your business transaction environments—including Linux, UNIX and z/OS on System z—helping you realize the reliability, scalability and cost-effectiveness of the mainframe. CA ACF2 provides an Advanced Authentication Mainframe feature, system entry validation, resource control, auditability, accountability, and administrative control. In conjunction with distributed security solutions from CA Technologies, CA ACF2 provides mobile-to-mainframe enterprise class security and compliance management.

Get the Mainframe Security Buyer's Guide and find out what your peers are saying about ACF2, IBM Security zSecure, IBM Resource Access Control Facility and more!

ACF2 is the #5 ranked solution in top Mainframe Security solutions and #17 ranked solution in top Database Security solutions. PeerSpot users give ACF2 an average rating of 9.0 out of 10. ACF2 is most commonly compared to IBM Security zSecure: ACF2 vs IBM Security zSecure. ACF2 is popular among the large enterprise segment, accounting for 80% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 36% of all views.

Buyer's Guide

Mainframe Security

January 2025

Get the category report

Helped 831,020 peers since 2012

Featured reviews

reviewer1077621

IT Examiner at a financial services firm with 10,001+ employees

It is a good product. It has been used for years. As long as it is configured correctly, it is a very stable product. It depends on how an institution or a company configures it. It depends on an institution's risk appetite. You need to make sure it is configured as per the concept of least privilege, and the logging features, detection and control mechanism, and other things like that are enabled. If you configure it to give access to the public, then there could be compromises. You should also have someone who independently checks it to make sure that it is configured keeping security in mind. If it has been configured for a while, when there are enhancements to the product or when you enhance it, you need to make sure that security is also looked at, and it is configured according to an institution's security policies. I would rate it a nine out of 10.

Read full review

Patrick Mondoy

Project Manager at Capgemini

This being a legacy product, developing a cooperating group of companies (for reduced license expenses) does lack real support. You would really have to rely on the web and other resources to get the general gist of operations. The real crux of problems lies in the way UIDs are constructed. Those that may have this information have long left the company. Usually this information is not captured properly in documents, as UID specifications may have been designed quickly and in ad-hoc fashion. You will have to rely on any information current support teams retained.

Read full review

it_user811302

Technical Architect at a healthcare company with 10,001+ employees

To provide security for the z/OS operating system By providing a high level of access control to the z/OS systems, ACF2 allows us to maintain tight controls on dataset and system access. It also helps us keep unauthorized users from accessing PHI or PII data. The level of protection that ACF2…

Read full review

ACF2 mindshare

Product category:

As of January 2025, the mindshare of ACF2 in the Mainframe Security category stands at 7.7%, down from 13.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Mainframe Security

Key learnings from peers

Valuable Features

"Logging and monitoring are most valuable. It is for the mainframe environment, and it is at the forefront for security and resilience."
"Excellent real-time reporting that saves time and resources."
"The NOACCESS by default is another very good feature. Also, access rules are straightforward, and easy to understand."

Room for Improvement

"They can work on its ability to work in a distributed environment. It's a mainframe product. As many companies move to the cloud, depending on what cloud models they choose, such as a public, hybrid, or private cloud, it should be deployable. I am not sure if it can be deployed on those platforms. It has been there since the '50s or '60s, and it's still scalable. It has survived all these years, and it's scalable to many platforms, but I don't know about the cloud."
"Reporting can sometimes include false positives."
"It needs longer rules. The max rule is 32K."

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Mainframe Security Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews

Financial Services Firm

36%

Computer Software Company

Manufacturing Company

Retailer

Insurance Company

Government

Comms Service Provider

Healthcare Company

Educational Organization

University

Hospitality Company

Wholesaler/Distributor

Performing Arts

Museum Or Institution

Non Profit

Outsourcing Company

Legal Firm

Real Estate/Law Firm

Energy/Utilities Company

Consumer Goods Company

Logistics Company

Media Company

Compare ACF2 with alternative products

Learn more about ACF2

ACF2 Features

ACF2 offers some of the following features:

Authentication: ACF2 is used for authenticating users and granting them access to profiles and various resources on the mainframe.
Access Control: The solution provides resource control, allowing administrators to control who can access specific mainframe resources.
Logging and Monitoring: Organizations can easily track and monitor activities on the mainframe. This feature enables the creation of audit trails for follow-up and helps with security analysis.
Metrics and Reporting: ACF2 allows the configuration of tools to produce different types of metrics and reports. These can then be used by senior management for making informed security decisions.
Comprehensive Security: The solution provides comprehensive security for mainframe environments, ensuring the protection of valuable data assets. It offers advanced authentication, system entry validation, and administrative control.
Streamlined Administration: It simplifies the administration of mainframe security by providing streamlined management capabilities. ACF2 also enables administrators to monitor and adjust security policies and accommodate various organizational structures.
Scalability: ACF2 offers reliable and scalable security, allowing businesses to expand their mainframe environments while maintaining a high level of protection.
Compliance Management: Organizations can meet compliance requirements by providing auditability, accountability, and comprehensive security controls.
Integration: ACF2 can integrate with distributed security solutions from CA Technologies, providing enterprise-class security and compliance management for mobile-to-mainframe environments.
Flexibility: ACF2 allows flexibility in adapting security policies to accommodate different organizational structures and requirements.