PTFs are released regularly by IBM and the OS is delivered with the most
current fixes installed. The system can be set automatically download and
install PTFs from IBM. Usually PTFs are only required if a problem suggests
a PTF is required. For most businesses this are quite rare so PTFs are no
much of a worry. The manual install of PTFs is very simple.
The "i" is a general purpose server- and like any server it needs to be
configured to siute the tasks in hand. The "i" is a true multitasking system
and many server functions can be simultaneously active on a single system.If
by "hardening" you mean "configuration", then yes some hardening is
required. Network topography is simplified because there are less physical
servers required.
The OS comes complete with a packet filter firewall that can be used to set
up a NAT configuration for the network. Using an "i" server as an internet
gateway is as secure as using an Intel system as a gateway. Obviously, a
different system i on the internal network should be used for internal
business systems. Additional firewall products can be purchased. The Client
in question also uses my Fortress/400 network security product as an
additional firewall, protecting the file system from attack from both inside
and outside the network.
Syd Nicholson
----- Original Message -----
From: "Thorbjørn Ravn Andersen" <thunderaxiom@xxxxxxxxx>
To: "Web Enabling the AS400 / iSeries" <web400@xxxxxxxxxxxx>
Sent: Monday, August 18, 2008 10:47 PM
Subject: Re: [WEB400] Getting started with
Net.data -was -I'dbetterdomorethan talk
Dr. Syd Nicholson skrev den 18-08-2008 22:26:
Why does this client use "i"? -- They use it because with "i" they can run
a
24/7 shop with zero IT staff. That right, there are no IT staff. This
company pays a retainer for support on an as required basis and have
worked
this way since 1994. Never has the system failed in all this time.
Very interesting :) You got me curious - I believe that the PTF's are
fixpacks for the i. What is the schematic for rolling these in? Or are
these so rare that it doesn't really matter?
One of the things I have found with the i, is that it is not hardened
very well at the time of installation, and that it doesn't take much
effort to e.g. disable an account or put in a trojan (not that I've ever
done that, oh no). Then I wonder why this shop dares to put an i to be
a firewall - has it been sufficiently hardened by the retainer or is the
i such a tiny niche that there is no need to worry?
midrange.com
