Re: Secure Telnet Between i5's ?

[David Gibbs <david@xxxxxxxxxxxx>]

Jones, John (US) wrote:
> Secure the transport, not the protocol.  Configure a VPN connection 
> between the two systems so all of the traffic, not just telnet, can
> be encrypted.

Although I don't know all the details of the issue, I have been doing
some investigation regarding this kind of thing.

The problem with securing the transport is that everyone using the
transport can (theoretically) see the traffic.  The various security
rules (HIPA (medial), PIC (credit card), etc) are not so concerned with
people outside the organization seeing the traffic (although that is
clearly a major concern) ... but people INSIDE the organization seeing
the traffic.

Hence the requirement for no unsecured internal FTP, TELNET, etc.

david