RE: Green Screen access for customers - suggestions??

I have access to our AS/400s via Mocha (www.mochasoft.dk). Even over the
Internet, without putting the AS400s on the Internet. By using a socket
redirection program I wrote, I'm able to forward the Telnet connections
to an internal IP address. The standard Telnet port 23 is not being used
over the Internet, which provides for additional security. This solution
includes the use of a NT Server on the Internet or with RAS enabled and
a copy of our Socket Sidewinder program.

If you get a copy of Mocha TN5250 and want a demo, I can help. EMail me
at ken@cm-inc.com and I can get you a AS/400 signon screen over the
Internet when you're ready.

Ken Slaugh
(707) 795-1512 Ext 118
Programmer/System Analyst
Certified Network Administrator MSE
Specialist - Client Access/400

Chouinard & Myhre, Inc.
An IBM Premier Business Partner
P.O. Box 636
Cotati, Ca 94931
http://www.cm-inc.com/


> -----Original Message-----
> From: Mark A. Manske [SMTP:manske@pconline.com]
> Sent: Friday, October 01, 1999 12:04 PM
> To:   'MidRange AS/400'
> Subject:      Green Screen access for customers - suggestions??
> 
> Hello; I am a Sr. Project Lead at a distribution company.
> We have customers that would like to dial into our AS/400
> have restricted access through the AS/400 security
> and be able to change their SRP's.
> 
> Here is the issue; we do not want to use Hyperterm; too 
> clumsy and not very nice to look at.
> Our preference would be Client Access - 
> I am unclear of the IBM licensing issues with regards
> to this option; not to mention the thing that concerns us the most
> is the security issues with regards to being able to do file uploads
> and downloads.  
> 
> With this in mind, is there a way to set CA up so that you do not
> have access to upload/download; short of burning your own copy
> and leaving out the *.EXE's that perform those functions; or 
> having to go to each customer site to install CA and "remove
> features" after the fact.  This all in all would still not stop a 
> savvy "geek" to get a full copy of CA and still have access to 
> upload/download by re-installing it.
> 
> Bottom line, is there anything our there that functions like
> the old dumb terminals we all grew up with (ok I'm dating
> myself, I have worked on a S/3 , S/34, S/36, S/38 (mod 8)
> talk about needing a whole floor for a system)
> 
> It does not matter if they call our server or the AS/400;
> I am just looking for thoughts and ideas to how this 
> could be accomplished economically for our customers
> and simplistic for the company so the knowledge can
> be passed on painlessly.
> 
> Thank you in advance for any help..
> 
> 
> 
> Mark A. Manske      [mailto:manske@pconline.com]
> Sr. Project Lead
> Minter-Weisman
> 
> 
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---