Try our new research platform with insights from 80,000+ expert users
ACF2 Logo

ACF2 Reviews

Vendor: Broadcom
4.5 out of 5
429 followers
Start review

What is ACF2?

CA ACF2™ for z/OS provides innovative, comprehensive security for your business transaction environments—including Linux, UNIX and z/OS on System z—helping you realize the reliability, scalability and cost-effectiveness of the mainframe. CA ACF2 provides an Advanced Authentication Mainframe feature, system entry validation, resource control, auditability, accountability, and administrative control. In conjunction with distributed security solutions from CA Technologies, CA ACF2 provides mobile-to-mainframe enterprise class security and compliance management.

Get the Mainframe Security Buyer's Guide and find out what your peers are saying about ACF2, IBM Security zSecure, IBM Resource Access Control Facility and more!
ACF2 is the #6 ranked solution in top Mainframe Security solutions and #17 ranked solution in top Database Security solutions. PeerSpot users give ACF2 an average rating of 9.0 out of 10. ACF2 is most commonly compared to IBM Security zSecure: ACF2 vs IBM Security zSecure. ACF2 is popular among the large enterprise segment, accounting for 79% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 33% of all views.
Buyer's Guide
Mainframe Security
March 2025
Get the category report
Helped 842,388 peers since 2012

Featured ACF2 reviews

Read more reviews

ACF2 mindshare

Product category:
Mainframe Security
As of March 2025, the mindshare of ACF2 in the Mainframe Security category stands at 9.1%, down from 12.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Mainframe Security
 
 
Key learnings from peers

Valuable Features

ACF2 excels in mainframe security by offering strict, reliable access control and user security management. Organizations value its automatic privilege assignments and rule management. NOACCESS by default and straightforward access rules enhance protection. Logging and monitoring are crucial, with real-time reporting on event logs saving time and optimizing resource allocation. Its security and resilience features make it essential in mainframe environments.
  • "Logging and monitoring are most valuable. It is for the mainframe environment, and it is at the forefront for security and resilience."
  • "Excellent real-time reporting that saves time and resources."
  • "The NOACCESS by default is another very good feature. Also, access rules are straightforward, and easy to understand."

Room for Improvement

ACF2 requires improvements such as an Eclipse interface for simpler programmable access, longer rules exceeding 32K, and browser support for tasks instead of 3270. It should reduce manual intervention and false positives in user access checks. Organizations suggest focusing on integration with distributed applications and adaptability to cloud environments. There's a call for unique, secure naming conventions for accounts and user IDs.
  • "They can work on its ability to work in a distributed environment. It's a mainframe product. As many companies move to the cloud, depending on what cloud models they choose, such as a public, hybrid, or private cloud, it should be deployable. I am not sure if it can be deployed on those platforms. It has been there since the '50s or '60s, and it's still scalable. It has survived all these years, and it's scalable to many platforms, but I don't know about the cloud."
  • "Reporting can sometimes include false positives."
  • "It needs longer rules. The max rule is 32K."

Popular Use Cases

Organizations primarily utilize ACF2 to manage security and user access on mainframe systems. They handle user authentication, profile access, and deprovisioning from applications. ACF2 is also used for monitoring log events through reporting. Additionally, it encompasses access management for z/OS operating systems, supporting authentication and access to various resources. Companies use the latest version of ACF2, which they host in-house.

Service and Support

ACF2 technical support is praised for its exceptional responsiveness and expertise, often prioritizing solving issues efficiently. Users appreciate the team's knowledge and ownership of problems. While current support staff are seen as helpful, there may be challenges related to outdated UID information and the need to rely on external resources. ACF2 customers generally express high satisfaction with technical support quality and reliability.

Deployment

Some users found ACF2's initial setup complex, especially if relying on contractors, as errors require a deep understanding of ACF2. Others weren't involved but heard it performed reliably. For some, achieving goals took time but was completed within six months, suggesting it's widely adopted by the IT group. Another described the setup as straightforward, while one reviewed ACF2's security assessment without handling deployment. ACF2 has unexplored capabilities still being considered.

Scalability

ACF2 exhibits robust scalability, seamlessly accommodating large organizations. It efficiently handles user authentication and role changes across thousands of employees. Users reported no issues even when integrating with LDAP or AD groups, ensuring secure extensions. With its ability to support numerous deployments, ACF2 remains an integral security manager for mainframe environments despite its legacy status. Users trust it to manage corporate access while efficiently adapting to staff changes.

Stability

ACF2 is 100% stable and exhibits many years of reliable use. Users experience no issues, emphasizing its robust nature. Stability depends on system administrators' configurations. When configured with security in mind, ACF2 maintains its stability.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Mainframe Security Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews
Financial Services Firm
33%
Computer Software Company
10%
Manufacturing Company
9%
Retailer
8%
Insurance Company
7%
Comms Service Provider
6%
Government
5%
Healthcare Company
4%
Educational Organization
4%
Real Estate/Law Firm
2%
Hospitality Company
2%
University
2%
Wholesaler/Distributor
1%
Performing Arts
1%
Non Profit
1%
Outsourcing Company
1%
Legal Firm
1%
Media Company
1%
Energy/Utilities Company
1%
Consumer Goods Company
1%
Logistics Company
1%
Museum Or Institution
1%

Compare ACF2 with alternative products

Go!

Learn more about ACF2

ACF2 Features

ACF2 offers some of the following features:

  • Authentication: ACF2 is used for authenticating users and granting them access to profiles and various resources on the mainframe.

  • Access Control: The solution provides resource control, allowing administrators to control who can access specific mainframe resources.

  • Logging and Monitoring: Organizations can easily track and monitor activities on the mainframe. This feature enables the creation of audit trails for follow-up and helps with security analysis.

  • Metrics and Reporting: ACF2 allows the configuration of tools to produce different types of metrics and reports. These can then be used by senior management for making informed security decisions.

  • Comprehensive Security: The solution provides comprehensive security for mainframe environments, ensuring the protection of valuable data assets. It offers advanced authentication, system entry validation, and administrative control.

  • Streamlined Administration: It simplifies the administration of mainframe security by providing streamlined management capabilities. ACF2 also enables administrators to monitor and adjust security policies and accommodate various organizational structures.

  • Scalability: ACF2 offers reliable and scalable security, allowing businesses to expand their mainframe environments while maintaining a high level of protection.

  • Compliance Management: Organizations can meet compliance requirements by providing auditability, accountability, and comprehensive security controls.

  • Integration: ACF2 can integrate with distributed security solutions from CA Technologies, providing enterprise-class security and compliance management for mobile-to-mainframe environments.

  • Flexibility: ACF2 allows flexibility in adapting security policies to accommodate different organizational structures and requirements.

ACF2 Benefits

Some of the benefits that ACF2 provides are:

  • Enhanced security and resilience

  • Streamlined administration

  • Reliable and scalable security

  • Comprehensive audit capabilities

  • Cost-effectiveness

  • Integration with other security solutions

  • Simplified identity and access management

  • Compliance management

  • Efficient monitoring and reporting

Reviews from Real Users

According to an IT Examiner at a financial services firm with 10,000+ employees, "ACF2 is extremely beneficial for the mainframe environment, and it is at the forefront for security and resilience."

ACF2 was previously known as CA ACF2.

ACF2 customers

Sky, Rogers Communications

Related questions

  • 2
What is a good length for a password in ACF2 so it's safe?
  • 2
Is ACF2 suitable for beginners?
  • 0
What types of auditing and reporting capabilities does ACF2 offer?
  • 15
What is the difference between mainframe security assessment and a mainframe pentest?
  • 22
What are some common misconceptions that people often have about mainframe security?
  • 30
What are External Security Managers?
  • 0
When evaluating Mainframe Security, what aspect do you think is the most important to look for?
  • 0
What is the difference between mainframe security assessment and a mainframe pentest?
  • 2
What are some common misconceptions that people often have about mainframe security?
  • 4
What are External Security Managers?

Product Categories

Product Categories
Mainframe Security
Database Security

Popular Comparisons

Popular Comparisons
IBM Security zSecure vs ACF2 Logo
IBM Security zSecure vs ACF2
IBM Resource Access Control Facility vs ACF2 Logo
IBM Resource Access Control Facility vs ACF2
Top Secret vs ACF2 Logo
Top Secret vs ACF2
See all alternatives
 

ACF2 reviews

Sort by:
PeerSpot user
IT Examiner at a financial services firm with 10,001+ employees
Verified user of ACF2
Jan 19, 2022
A reliable, scalable product for security and auditing of our mainframe environment

Pros

"Logging and monitoring are most valuable. It is for the mainframe environment, and it is at the forefront for security and resilience."

Cons

"They can work on its ability to work in a distributed environment. It's a mainframe product. As many companies move to the cloud, depending on what cloud models they choose, such as a public, hybrid, or private cloud, it should be deployable. I am not sure if it can be deployed on those platforms. It has been there since the '50s or '60s, and it's still scalable. It has survived all these years, and it's scalable to many platforms, but I don't know about the cloud."

What is our primary use case?

We use it in our company for our mainframe. It is used for authenticating users and giving users access to profiles and various resources. So, it is for authentication and giving access to users, and it also does logging and things like that.

It is currently hosted in-house. We are using its latest version. We are always on current versions.

How has it helped my organization?

It captures and helps with security. You get some type of audit trails using which you could do a follow-up. There are certain tools that you can configure to produce different types of metrics for senior management for making decisions. These are the ways in which it has helped us.

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (686 words)
PM
Project Manager at a tech services company with 10,001+ employees
Verified user of ACF2
Jan 8, 2017
Product version discussed: 2
Provides compliance with SOX controls and full evidence of SoD adherence.

What is most valuable?

The most valuable feature is strict and reliable access control to CICS Resources. Valid access is positive; a block is a genuine block.

How has it helped my organization?

ACF2 provides us with compliance with SOX controls and full evidence of SoD adherence.

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (399 words)
Buyer's Guide
Mainframe Security
Download free report
Find out what your peers are saying about Mainframe Security. Updated March 2025
842,388 professionals have used our research since 2012.
PeerSpot user
Technical Architect at a healthcare company with 10,001+ employees
Verified user of ACF2
Jan 31, 2018
Product version discussed: R16
Allows us to maintain tight controls on dataset and system access

Pros

"The NOACCESS by default is another very good feature. Also, access rules are straightforward, and easy to understand."

Cons

"It needs longer rules. The max rule is 32K."

What is our primary use case?

To provide security for the z/OS operating system.

How has it helped my organization?

By providing a high level of access control to the z/OS systems, ACF2 allows us to maintain tight controls on dataset and system access. It also helps us keep unauthorized users from accessing PHI or PII data.

*Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
Read full review (290 words)
PeerSpot user
IT Examiner at a financial services firm with 10,001+ employees
Verified user of ACF2
Jun 12, 2019
Saves resources through fully automated reporting

Pros

"Excellent real-time reporting that saves time and resources."

Cons

"Reporting can sometimes include false positives."

What is our primary use case?

Our primary use is to be able to review log events through reporting.

How has it helped my organization?

This product makes us more efficient because of the reports it provides. Without the product, extracting this information may take us as much as several days. Instead, we can get it in real time.

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (560 words)
PeerSpot user
Chief Strategist at Mainframe analytics
Verified user of ACF2
Dec 4, 2016
This product ensures that data is handled only by those who should be handling it and only in the way that they should be handling it.

What is most valuable?

This product provides excellent quality for security in the mainframe environment.

How has it helped my organization?

Basically, it ensures that data is handled only by those who should be handling it and only in the way that they should be handling it.

This product provides visibility and security as to how the data is being used.

*Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
Read full review (442 words)
PeerSpot user
Security Analyst
Verified user of ACF2
Dec 31, 2017
We use this tool to quickly assign privileges to different users as soon as they come in

Pros

"We use this tool to quickly assign privileges to different users as soon as they come in."

Cons

"I would like my team and me to be able to use simple browsers, like Chrome, to be able to access mainframe data and provision users using the browser.​"

What is our primary use case?

We use CA ACF to manage security, provision users, and deprovision users from mainframe applications. 

What is most valuable?

One of the values in this industry is how it manages user security. We use this tool to quickly assign privileges to different users as soon as they come in. As soon as we onboard the users, we use CA ACF to assign privileges and assign rules to all the users. When the rule changes, we use CA ACF to change the rules or deprovision them from those rules and assign them new rules. It is done quickly and almost automatically.

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (342 words)