Re: AS/400 access through the internet

[booth@xxxxxxxxxxxx]

This may seem a snippety reply but is he this concerned over the phone 
lines? Does he audit the trash collections?  Is he sure old reports go to 
validated destruction?  I am not trying to make light of security issues, 
but is it possible that we are all reacting to this new communication 
bonanza with too much worry?  Most damage, most destruction, most loss of 
data comes from internal security errors; has he worried about this at 
all?  Are workers searched at night to be sure hard drives are not being 
carried off?

My only point is that by locking down a non-issue so tightly he is 
hampering company performance and production.   Will there be attacks? 
Sure there will, and there will be damage, but will it be any worse than 
the current levels of burglary and robbery?  Probably not.

The other question that bothers me is  that people get so upset over this 
issue with the AS/400 and then shrug off The Love Bug virus as no big 
deal.  How come?  Why isn't a very real problem of more concern to them 
than a non-real never-happened problem?

_______________________
Booth Martin
Booth@MartinVT.com
http://www.MartinVT.com
_______________________




dwillenborg@jcrob.com (Dave Willenborg)
Sent by: owner-midrange-l@midrange.com
06/15/2000 04:59 PM
Please respond to MIDRANGE-L

 
        To:     MIDRANGE-L@midrange.com
        cc: 
        Subject:        AS/400 access through the internet

Greetings

I have installed Client Access Express on company PCs so the users can
sign on to the AS/400 through internet access. Everything  works fine. I
had the Network Administrator open only 6 ports on our firewall to allow
the access. This was done with the help of the IBM Support line.

Now the Network Administrator wants to close the ports because it is too
dangerous to have them open. Someone with a sniffer could detect User-id
and passwords.

I suggested that we upgrade to SSL but that idea was not received with a
lot of acceptance.

I would appreciate any suggestions on ways to make the connection secure. 

Dave Willenborg
MIS Manager
J. C. Robinson Seed Co
dwillenborg@jcrob.com

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to 
MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: 
david@midrange.com
+---




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---