Re: Third-Party Security Tools

[mcrump@xxxxxxxxxxxxxxxx]

This probably behooves the adage that you carefully determine what it is you
want this 3rd party product to do.  There are a number of features in the
PentaSafe product we simply do not use.  And there are probably a number of
'security' related functions that it and some of these other products do not do.

We bought PentaSafe PSSECURE with the intent of gaining command and control of
exit points (ie: backdoors).  In this capacity we are very pleased.  PSAUDIT and
PSDETECT are on our web machine.  We hope to use PSDETECT to give us a more real
time reaction capability towards improper use.  In this matter I don't have an
opinion yet.

My biggest complaint with PentaSafe is that the products are a little pricey.
Fortunately an audit requirement and a penetration study helped justify
them........


Michael Crump
Saint-Gobain Containers
1509 S. Macedonia Ave.
Muncie, IN  47302
(765)741-7696
(765)741-7012 f
(800)428-8642



|--------+----------------------->
|        |          "Mike        |
|        |          Silvers"     |
|        |          <msilvers@hbs|
|        |          -inc.com>    |
|        |                       |
|        |          11/27/00     |
|        |          04:43 PM     |
|        |          Please       |
|        |          respond to   |
|        |          MIDRANGE-L   |
|        |                       |
|--------+----------------------->
  >--------------------------------------------------------------------|
  |                                                                    |
  |       To:     MIDRANGE-L@midrange.com                              |
  |       cc:     (bcc: Mike Crump/IT/SGContainers)                    |
  |       Subject:     Re: Third-Party Security Tools                  |
  >--------------------------------------------------------------------|





We had some exposure to the PentaSafe product.  We have a model 170 on
security level 50 and we watch how user profiles were setup with
authorities.  The PentaSafe product was not very helpful in our situation.
Our other 400 (a model S20), is at security level 40 and again, we have
watched the authority of all user profiles.  Again, the PentaSafe product
would not benefit us.  I believe that for a person who is not very
proficient in the security aspects of the 400, PentaSafe would be helpful.

Mike







================================

Mike Silvers
AS/400 Senior Programmer/Analyst
AS/400 IBM Certified Expert
Hainey Business Systems
8 E. Canal St
Dover, PA 17315
Branch Office:  (410) 397-8739
Phone:  (800) 932-3380
Fax:  (717) 292-9474
Web: http:\\www.hbs-inc.com
________________________________
Providing E-Commerce, EDI, AS/400
Development and related services
nationwide.
================================
----- Original Message -----
From: Olliges, James <JOLLIGES@SMURFIT.COM>
To: <MIDRANGE-L@midrange.com>
Sent: Monday, November 27, 2000 4:20 PM
Subject: Third-Party Security Tools


> I was wondering if anyone has any real-world experience with the following
> third-party security tools for the AS/400:
>
> PentaSafe
> Axent
>
>
> James A. Olliges
> Smurfit-Stone ITD Chicago
> jolliges@smurfit.com
>
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---



+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---