Smart Associates Product

NZ Controller

A modern web-based management GUI for Netezza — both PureData for Analytics hardware appliances and NPS on CloudPak for Data (Hammerhead). Makes Netezza dramatically easier to monitor, manage, administer, tune and support, replacing the legacy SSH and CLI workflow with a single web application. Optionally pair it with our DISA STIG-configurable, OpenSCAP-verifiable Legacy OS Hardening service to bring unsupported RHEL 6/7 PDA appliances back into modern security compliance. NZ Controller is bundled at preferential pricing for Netezza® Support Plus Managed Service customers — substantially below the standalone list price.

The Interface at a Glance

GUI Now, Hardening When You’re Ready

01

Management GUI

A modern browser-based web application that makes Netezza dramatically easier to monitor, manage, administer, tune, and support — across both PureData for Analytics hardware appliances and Netezza Performance Server (NPS) on CloudPak for Data (Hammerhead). System overview, hardware health, active sessions, query diagnostics, audit logs, backup management, and host operations are all in one web UI — without needing to memorise IBM’s legacy CLI command set or maintain SSH expertise across an operations team. New engineers become productive in hours rather than months; existing teams stop running cryptic shell scripts from memory; management gets the visibility command-line tools never provided. Smart Associates engineers use NZ Controller as the standard access method for all managed support activity.

02

Legacy OS Hardening

Bring an unsupported RHEL 6/7 PureData appliance back into modern security compliance — configurable to your required DISA STIG profile, independently verifiable via OpenSCAP. Four new SSDs (shipped to your site, 2 per host for redundancy) host a hardened Enterprise Linux 9 shell that wraps the legacy NPS environment; the Netezza database and original OS continue running on the existing RAID array, but now fully isolated behind the modern outer shell. Critical CVEs in the unsupported legacy OS are no longer reachable from the network. Externally, only the ODBC/JDBC database port (5480) and NZ Controller’s authenticated web interface are exposed — SSH and direct CLI access are eliminated, dramatically reducing attack surface. The appliance becomes easier to administer, not harder: NZ Controller (running on the new EL9 host) is the modern web UI that replaces the legacy command-line workflow. Applies to legacy PureData for Analytics hardware only — NPS on CloudPak for Data (Hammerhead) is already on a modern Linux base and does not need this service.

RHEL6 on Netezza Is an Unresolved Security Liability

Netezza N2001 and N3001 systems run on Red Hat Enterprise Linux 6, which reached end of support in November 2020. IBM® has never provided an official path to upgrade Netezza to RHEL7 or above — and RHEL7 itself reached end of support in July 2024. Known CVEs on RHEL6 Netezza systems will not receive patches from IBM or Red Hat.

This is often the main obstacle to keeping a Netezza appliance running long-term. Even where the business continues to get significant value from the platform, a compliance or security team that cannot accept an unpatched OS will push for decommission or expensive migration — regardless of whether the data platform itself is performing well.

Smart Associates’ Legacy OS Hardening service removes that obstacle. The legacy RHEL6 environment continues to host the Netezza database on its original RAID array, but is now wrapped inside a hardened Enterprise Linux 9 outer shell — configurable to your required DISA STIG profile and independently verifiable via OpenSCAP scans. Known CVEs in the unsupported legacy OS are no longer reachable from the network. Compliance teams get the formal documentation they need; security teams get the dramatically reduced attack surface; the appliance keeps running with no migration cost.

RHEL6 EOS: November 2020
No security patches from Red Hat. IBM provided no upgrade path for Netezza.
Example: CVE-2016-6515
OpenSSH auth_password vulnerability. Fixed in RHEL7 — unfixed on RHEL6 Netezza systems.
DISA STIG Configurable
The EL9 outer shell is hardened to your required DISA STIG profile during installation. Documentation supplied.
OpenSCAP Verifiable
Compliance baseline is independently scannable. Security teams can re-verify the system any time, on demand.

Modern Control for Legacy Hardware

Modern web-based monitoring, management, and tuning for PureData for Analytics. On any Netezza system, NZ Controller is dramatically more productive than the legacy CLI. On a hardened system — where SSH and direct shell access have been eliminated to reduce attack surface — it becomes the operational interface for all host-level work.

System Overview

A consolidated dashboard showing the current state of your PureData for Analytics appliance — hardware status, software versions, and system health at a glance.

Hardware Health Monitoring

Real-time visibility into hardware health across the appliance chassis: disk status, fan speeds, temperatures, and firmware versions — in one web view rather than scattered across a dozen shell commands. On a hardened system, with SSH eliminated, this is the standard interface for hardware diagnostics.

Active Sessions

Monitor current database sessions, query activity, and connected users. Identify long-running or problematic queries and take action directly from the browser.

Audit Log

A tamper-evident record of management actions and system events — supporting compliance requirements and providing the audit trail needed for security reviews and incident investigation.

Delivered Remotely in Three to Five Days

Smart Associates ships the SSDs directly to your site. Our engineers then guide you through the full process remotely: SSD installation, EL9 host configuration, RHEL6 VM migration, firewall hardening, and NZ Controller setup. No on-site visit required.

The EL9 outer shell can run any Enterprise Linux flavour — Rocky, Alma, Oracle, or RHEL — to match your organisation’s standards.

Discuss Deployment
1
Smart Associates ships the SSDs 4× SSDs dispatched directly to your site, ready for fitting into spare slots in your existing 2-host chassis.
2
Remote-guided SSD installation Your team fits the drives with step-by-step remote guidance from Smart Associates engineers. Original RAID array untouched throughout.
3
EL9 host configuration and VM setup Smart Associates remotely installs and configures Enterprise Linux 9 on the new SSDs (2 per host for active/standby redundancy). Firewall hardened: only the ODBC/JDBC database port exposed externally. RHEL6 NPS host migrated into a VM.
4
NZ Controller installation and sign-off Web management application installed and validated against your live environment. Handover and walkthrough with your team.

Two Ways to Subscribe

Subscribe to NZ Controller standalone, or with the optional one-off Legacy OS Hardening add-on for compliance. Self-service via the Smart Associates portal.

Subscription

NZ Controller

Monthly subscription · Three tiers by appliance count · Annual prepay available

Modern web-based monitoring, management, and tuning for any PureData for Analytics appliance. System overview, hardware health, active sessions, audit logs, backup management, performance diagnostics — all in one web UI. Three subscription tiers covering 1–3, 4–10, and 11+ appliances, billed monthly or annually (pay for 10 months, get 12).

View NZ Controller pricing →
Subscription + Add-on

NZ Controller + Legacy OS Hardening

NZC subscription + $7,500 one-off per appliance · DISA STIG configurable · OpenSCAP verifiable · Legacy PDA hardware only

Add Legacy OS Hardening to your NZ Controller subscription to bring an unsupported RHEL 6/7 PureData for Analytics appliance back into modern security compliance. 4× SSDs supplied per appliance (shipped, 2 per host for redundancy) hosting a hardened EL9 outer shell — configurable to your DISA STIG profile, OpenSCAP-verifiable. The legacy Netezza database continues on the original RAID, now fully isolated behind the modern shell so known CVEs are no longer reachable. NZ Controller (running on the new EL9 host) is the modern web UI for ongoing administration. For legacy PureData for Analytics hardware only — NPS on CloudPak for Data (Hammerhead) is already on a modern Linux base and does not need this service.

View NZ Controller pricing →

NZ Controller bundles with Netezza Support Plus Managed

Smart Associates engineers use NZ Controller as the standard access method for all managed support activity on your system. Existing NSP Managed customers receive NZ Controller at preferential pricing, billed on a single integrated invoice with a complete audit trail of every action taken.

View Managed Support →

Harden Your Appliance. Simplify Its Management.

NZ Controller is bundled with Netezza Support Plus Managed at preferential pricing. Talk to us about your appliance or the OS hardening service, or explore our managed support options.

Have specific requirements? Discuss with our team