RE: ACS 5250 VPN Issues

Sorry, I forgot to include that they are using Check Point for VPN, if that helps.

From: midrangel@xxxxxxxxxxxxxxxxx<mailto:midrangel@xxxxxxxxxxxxxxxxx>
Sent: Friday, May 29, 2020 12:26 PM
To: 'Midrange Systems Technical Discussion'<mailto:midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: ACS 5250 VPN Issues

That really sounds like an "application" firewall. It gets "netstat"
which is common across the board, but won't let WRKACTJOB go.....?

--
Jim Oberholtzer
Agile Technology Architects

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Steve
Pavlichek
Sent: Friday, May 29, 2020 11:20 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: ACS 5250 VPN Issues

To make this even more interesting, some commands work and some don't.
NETSTAT *IFC works, WRKACTJOB does not. GO LICPGM works but WRKLICINF does
not.
Same results using ACS and putty.
I'm running as QSECOFR, so it should not be an authority issue.

Again, these commands all work from the console

From: midrangel@xxxxxxxxxxxxxxxxx<mailto:midrangel@xxxxxxxxxxxxxxxxx>
Sent: Friday, May 29, 2020 11:01 AM
To: 'Midrange Systems Technical
Discussion'<mailto:midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: ACS 5250 VPN Issues

Two separate IP addresses/OS types, One works, one does not. Sounds like
firewall to me.

Is this an "application firewall" where it's actually scanning the
application vs. just the IP/Port? Global protect does that.

--
Jim Oberholtzer
Agile Technology Architects

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Steve
Pavlichek
Sent: Friday, May 29, 2020 9:00 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: ACS 5250 VPN Issues

Working with a new customer who has tight VPN policies. They give me access
to specific IP addresses and ports for each IP.
We've been struggling to get ACS 5250 working properly but I thought we had
it working last night as I was able to sign on to their system via 5250 (I
was able to sign on via HMC/Console with no problem).

Now I am finding that while I can sign on and get to a command line, the
session locks up when ever I enter a command. Same command works fine when I
am signed onto the console. If it matters this is a new LPAR with v7r4 and
latest PTFs (I did not create LPAR or load OS).

Is this a firewall issue or am I missing something on the OS side?

--