Re: Security for web site accessing i via IWS

["Koester, Michael" <mkoester@xxxxxxxxxxxxx>]

Thanks Sean,
I'll pass that along to SysAdmin.  Sounds like a good plan.  Since this web service will only be used by the web server, I may be looking at ways to expose the WSDL only to the web site developer as well.
--Michael

> -----Original Message-----
> From: WEB400 [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of
> Porterfield, Sean
> Sent: Wednesday, February 04, 2015 12:48 PM
> To: Web Enabling the IBM i (AS/400 and iSeries)
> Subject: Re: [WEB400] Security for web site accessing i via IWS
>
> Only allow the web server IP address through your firewall.  If you have
> to run other things on the same server that prevent that, at least check
> the IP address in your program to see if it's allowed.
> --
> Sean Porterfield
>
>
> -----Original Message-----
> From: Koester, Michael
> Sent: Tuesday, February 03, 2015 08:25
> To: Web Enabling the IBM i (AS/400 and iSeries)
> Subject: Re: [WEB400] Security for web site accessing i via IWS
>
> ...
> I just need to understand what needs to be done to protect the customer
> data in transit, and to ensure that the web server is the only way in.
>
> ________________________________