RE: iSeries FTP security

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

If the drawings are simply files, then they should be copied to a
sandbox.  Are these drawings generated by or interrogated by iSeries
programs?  That is, is the data inside the drawing actually used by an
iSeries program, or are they simply BLOBs?  If the latter, you should
review whether they even need to be on the iSeries.  There are other,
better, faster, cheaper solutions for static or semi-static binary data
that are just as secure.

You should also generate the EDI data into a sandbox.  I don't
understand the need for FTP to production data.  The point is that an
isolated sandbox and a limited-rights profile would get around a lot of
this.

Joe




> From: rob@xxxxxxxxx
> 
> I see your point in seeing if ftp is the solution is really what we
want.
> And you did agree that you did not know our business situation.
> 
> It's needed.  We want to share drawings with business partners.  And
some
> EDI based data goes in/out that way also with other trading partners.
Yes,
> perhaps we could beat it to death in other fashion to get around using
> ftp, but I'm not sure that it would be programming for the best
solution,
> or programming to get around using FTP.