Effective policy design for large deployments of IBM Tivoli Access Manager for Operating System

Effective policy design is critical for large deployments of IBM Tivoli Access Manager for Operating Systems. A large deployment can involve hundreds or thousands of UNIX and Linux systems, each with many resources to secure. This can result in a large and complex set of policy definitions in the IBM Tivoli Access Manager policy database, which has implications on network load, maintenance overhead, and the IBM Tivoli Access Manager for Operating Systems performance. This document looks at the issues and identifies approaches to improve the policy.