RE: Firewalls etc.

["Ed Davidson" <Edavidson@xxxxxxxxxxxx>]

We use the as/400 Firewall.  It has kept us secure, however it is lacking in
many aspects when compared to other firewalls.  The logs are very poor, and
the rules filter is too simple.  We use Kansmen's Little brother to block
internet access to specific sites, and for logging since the AS/400 firewall
cannot block a 'domain' - only IP address/port combos.  It cannot block
certain functions at various times of the day, or days of the week.  It
cannot block functions by user.  It can tell me where everyone has surfed,
but IBM doesn't recommend this setting.   It cannot block email by domain.
It cannot stay up more than a week without rebooting as it crashes often.
And yes, IBM setup our firewall - not us.  We did go through training.

Info supplied for others who might be looking at the as/400 firewall.


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---