Re: Firewalls Vs Exit programs

[John Earl <johnearl@xxxxxxxxxxxxxxxxxx>]

Robin,

I don't think that the question is "Firewalls vs Exit Programs".  A good 
security
system has multiple levels, so "Firewalls _and_ Exit programs" can complement
each other quite well.  Firewalls protect your internal network from outside
interlopers, and are valuable for keeping all kind of traffic off of your LAN.
Remember that someone trying to hack your system is going to attack the weakest
link, and in most organization that link would be a wintel system connected to
the internal LAN.  Once a single PC has been compromized, all traffic on the
network is in jeopordy.  A Firewall's job is to protect those external systems
from outside attack.

Exit Programs are usefull for limiting the functions of users who already have
access to your AS/400.  All of the exit points require that the user login with 
a
valid Usrprf and Password, so what you're trying to do here is limit their 
access
via tools such as FTP, DDM, OBDC, etc.


Don't choose between the two, use them both.

jte







Moore, Robin M. wrote:

> Hello All
>
> I'm looking into some information on Firewalls for the AS400.  We
> currently
> have ftp and telnet stopped at a cisco router( or something simular).
> In the near future we will be allowing these connections from off campus.
> I'm Currently controlling ftp and other connections on campus
> using exit programs, but wanted some knowledge from the Group about
> the benefits for using firewalls.
>
> Any information would be appreciated, and I'm hoping to find out how
> well, and some good points and bad points of products.
>
> Thanks.. Robin ..
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---



--
John Earl                                           johnearl@powertechgroup.com
The PowerTech Group                        206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                www.400school.com
--



+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---