Re: Green screen and network security

[goodwink@xxxxxxxxxxxxxx]

I'd go for SSL-enabled Telnet with client certificate authentication and
server certificate verification.  This will not only protect your logins,
but secure the rest of the session as well to prevent snooping.

Kyle Goodwin
Extensicom LLC

> We're having some discussions about what would be the most secure way to
> provide users traditional green screen access across a network while
> protecting the security of the network.
>
> Some ground rules/assumptions are:
>
> - Telnet to well know ports (23,25,80) is blocked.
> - The applications involved can't be changed. (e.g. to make them web
> friendly, must be green screen)
> - Only network security is at issue, once they sign on, the iSeries/400
> takes over.
> - Would prefer no user side software be installed but, if required, it
> should be minimal.
>
> Anyone want to jump in with their ideas?
>
> Kat Kruse
> IT Engineer
> Qualcomm Inc.
> kkruse@xxxxxxxxxxxx
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>