On our system people coming in the VPN are on a different subnet. For
example, if my "internal" is 10.10.6.x then my vpn one may be 10.17.4.y.
What their IP address is can be retrieved from the device description. I
trap then in IBM Notes Smart Upgrade to make sure we do not do Notes
upgrades over the VPN. We may change this now as internet speeds have
gone greatly up.
If you're concerned about security I would feel quite comfortable if they
are coming in over a VPN. That should encrypt the transmission and I see
no need to say "this guy can't look at payroll while using VPN since comm
may be compromised". Then again, if you are afraid of kidnapping and them
sharing secrets at gunpoint that's a different situation. Keep in mind
that 5250 is not the only way to look at data.
Are you thinking of doing RCAC based on IP number?
Rob Berendt
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact
[javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
midrange.com
