Re: iSeries Security Products

["Brad Stone" <brad@xxxxxxxxxxxx>]

I'm actually a user and a vendor of an FTP security
product.  I created it for my own use (and to help secure
FTP better and provide anonymous support) for companies
that I work for.

It's called FTPTOOL and can be found at
www.bvstools.com/ftptool.html.

It provides global security for connections and FTP
commands and logging as well as the same security down to
the user id/IP address level.  You can control logging,
which commands are available at a low level and which
directories on the machine these commands are allowed.

What this means is you can shut down certain FTP commands
globally, and turn them on for specific users.  Or just the
opposite.

It also allows you to add "trigger" applications so that
when a certain command (GET, PUT, DIR, etc) is run you can
call any application or command on your machine and also
have the parameters available (such as filename that was
used).  

It's very low priced (under $300) and because I use it and
write it, I believe I provide superior support to most.

Any questions, feel free to contact me.  I also believe
there are a few on this list that use it that may be able
to share.

Brad
www.bvstools.com

On Mon, 13 Jun 2005 11:29:27 -0500
 "Jones, John \(US\)" <John.Jones@xxxxxxxxxx> wrote:
> We're looking to purchase a security management product
> for our iSeries
> systems.  The main objective is to secure FTP (which has
> to be enabled)
> & ODBC, but other potential benefits will be considered
> as we do our
> evaluations.  We lack the resources to roll our own exit
> points in the
> required timeframe and we'd rather have a vendor product
> as there's less
> chance of things being missed.  Not to mention probable
> better
> functionality.
>  
> Functionality provided is the main criteria, but ease of
> implementation/administration and price are also
> considerations.
>  
> Products requiring an outboard Windows (or other
> non-i5/OS) server will
> not be considered.  However, a Windows-based GUI
> (browser, iNav plugin,
> etc.) served from the iSeries is fine for the admin
> front-end.
>  
> If you're a current or recent user of any currently
> available iSeries
> security product, I would like to hear your comments
> about the good, the
> bad, and the ugly.  If you don't care to publicly
> comment, off-list
> replies are welcome and will be held in strict
> confidence.
>  
> Vendor responses are welcome, but please send them
> off-list.
>  
> FWIW, the environment will be an LPARed i5 570 with V5R3.
>  The main apps
> are JDE World/OneWorld and Peoplesoft EnterpriseOne.
>  
> -- 
> John A. Jones, CISSP
> Americas Information Security Officer
> Jones Lang LaSalle, Inc.
> V: +1-630-455-2787  F: +1-312-601-1782
> john.jones@xxxxxxxxxx
>  
> 
> 
> This email is for the use of the intended recipient(s)
> only.  If you have received this email in error, please
> notify the sender immediately and then delete it.  If you
> are not the intended recipient, you must not keep, use,
> disclose, copy or distribute this email without the
> author's prior permission.  We have taken precautions to
> minimize the risk of transmitting software viruses, but
> we advise you to carry out your own virus checks on any
> attachment to this message.  We cannot accept liability
> for any loss or damage caused by software viruses.  The
> information contained in this communication may be
> confidential and may be subject to the attorney-client
> privilege. If you are the intended recipient and you do
> not wish to receive similar electronic messages from us
> in the future then please respond to the sender to this
> effect.
> -- 
> This is the Midrange Systems Technical Discussion
> (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit:
> http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the
> archives
> at http://archive.midrange.com/midrange-l.
> 

Bradley V. Stone
BVS.Tools
www.bvstools.com