RE: trading partner security

Jim,

There are numerous affordable tools out there that can make third-party
file interchange a secure and mostly passive activity.  We handle file
transfer activity for hundreds of third parties (client banks and credit
unions), in both directions.  Check out the MOVEit product from Standard
Networks:

http://www.stdnet.com/

It's a comprehensive solution for secure, automated transfer and
management of sensitive files and messages over private and public
networks (third-party file sharing).

Best regards,

Steven W. Martinson, CISSP, CISM
Manager of OutLink Security
Jack Henry & Associates, Inc.
7800 Willowchase Blvd.
Houston, TX.  77070
     voice              281.517.8000
     external fax       281.517.8157
     internal ext       471800
 

At 11:20 AM 2/18/2004, Jim Franz wrote:
>A trading partner wants to use ftp to get a daily file off our ifs, but
>is adamently refusing to specify a single ip they are coming from,
>saying that is a security risk to them, and has given us 3
>ranges totalling over 700 addresses. I don't have a problem
>but our firewall person is freaked and refuses. I assume they
>have a herd of routers and servers in their farm.
>note: partner is defense related. 400 has decent ftp exit control.
>should i worry?
>jim