Re: Firewall & SSL before AS/400

Simone,

We have two AS/400's connected to the internet.  One is our web server and
e-mail server.  The other is our development box.  We are using SSL in the
development box and SSL for secured web serving on the web server box.  We
use a Cisco router with access lists as our firewall.  All works well for
us.  We have a client that has a different situation.  They are using the
AS/400 as an e-mail server, and they have two remote locations in different
states.  They have two leased lines, one for the connection to the remote
sites and the other for their connection to the internet.  They have a
router with two serial ports, one for each line.  They then have  a firewall
product to split the traffic and limit the internet traffic.  After working
out the bugs, all is working well for them.

For us the SSL works well.  There is one problem with the SSL setup.  There
are some issues with the IFS when trying to look at and manipulate files on
the IFS.  I need to contact IBM about this.  The problem is that when in the
SSL mode, when I try to click on a file on the IFS, the program ends in
error and I need to start Ops Nav up again.

If you have any questions about the setup of SSL, feel free to e-mail me.

Mike



----- Original Message -----
From: Simone Pacciarini <spacciarini@yahoo.com>
To: <MIDRANGE-L@midrange.com>
Sent: Thursday, December 21, 2000 9:05 AM
Subject: Firewall & SSL before AS/400


> I was told that a good protection for an AS/400 used
> as HOD is to have, ride after the router, a PC running
> NT/server using 2 network cards (one connected to the
> router and one connected to the LAN) plus IBM Firewall
> and SSL.
>
> Does anybody have any suggestion and/or comments on
> the matter ?
> What are you using as Firewall and SSL ?
>
> Reagards,  Simone
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Shopping - Thousands of Stores. Millions of Products.
> http://shopping.yahoo.com/
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---