Re: DBU and it's competitors

Thanks Vern.  
 
In your experience w/AA is there any way security can be bypassed or 
compromised when using AA strictly over green screen command entry?  
 
Another way to ask is does AA encompass or include all security that green 
screen does?   
 
-----Original Message-----
From: Vernon Hamberg <vhamberg@xxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Sun, 22 Jan 2006 22:42:37 -0600
Subject: Re: DBU and it's competitors


Not sure why you don't want to work with App Admin - it's really 
quite simple. It's not the same as the packet stuff. You go into 
iSeries (Ops) Navigator, right-click on a connection, click on 
Application Administration, click on the Host Applications tab, then 
open AS/400 TCP/IP Utilities, then open File Transfer Protocol (FTP), 
then open the FTP server area and work with the users and block them 
as needed. It applies, AFAIK, to the user, no matter what PC or 
whatever they use to try to get in. Not just the one where you set it 
up. So it should be possible not to install AppAdmin on user PCs and 
be safe using just your PC for configuration. And you have to have 
*SECADM anyway to change this stuff. Also, from V5R2 it is possible 
to have a single server that holds the settings for others.

At 10:18 AM 1/22/2006, you wrote:

>I'm guessing that NetIQ might be a more expensive solution but one 
>that I can implement and maintain quickly and have good support for 
>(hopefully, NetIQ support's as good as IBM's), instead of me having 
>to work with AA.
>
>Make sense?
>
>
>-----Original Message-----
>From: vhamberg@xxxxxxxxxxx
>To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
>Sent: Fri, 20 Jan 2006 19:44:21 +0000
>Subject: Re: DBU and it's competitors
>
>
>You CAN handle user profiles with App Admin in iSeries Access. You 
>can also set
>up some kind of packet filter rules in iSeries Access, IIRC. Look 
>under Network
>in the items under a connection there. I THINK those can handle some of this,
>but others will have actual knowledge based on experience.
>
>-------------- Original message --------------
>From: fbocch2595@xxxxxxx
>
> > Hi, if I wanted only several usrprf's or ip addresses to b/able 
> to ftp could I
>
> > use this NetIQ to do that? Do I need an exit point program or does NetIQ
> > provide that?
> > Thanks
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: ISNM
> > To: midrange forum
> > Sent: Fri, 20 Jan 2006 07:55:45 -0800 (PST)
> > Subject: Re: DBU and it's competitors
> >
> >
> > If you already own NetIQ's (formerly PentaSafe's) PSSecure 
> product, which is
> > most often purchased for the exit point management capabilities 
> (RRM - Remote
> > Request Management), there is a module called Secure File Editor (SFE).
> > Green-screen only, but is easy to use.
> >
> > Steven W. Martinson, CISSP, CISM
> > Consultant - Servique, LLC
> >
> > Cell 281.546.9836
> > www.servique.com
> > 4801 Woodway Drive, Suite 300E
> > Houston, TX 77056
> >
> > "Uniquely Qualified"
> >
> >
> >
> > ---------------------------------
> > Yahoo! Autos. Looking for a sweet ride? Get pricing, reviews, & 
> more on new
>and
> > used cars.
> > --
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) 
> mailing list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/midrange-l.
> > --
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) 
> mailing list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/midrange-l.
> >
>--
>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
>To post a message email: MIDRANGE-L@xxxxxxxxxxxx
>To subscribe, unsubscribe, or change list options,
>visit: http://lists.midrange.com/mailman/listinfo/midrange-l
>or email: MIDRANGE-L-request@xxxxxxxxxxxx
>Before posting, please take a moment to review the archives
>at http://archive.midrange.com/midrange-l.
>--
>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
>To post a message email: MIDRANGE-L@xxxxxxxxxxxx
>To subscribe, unsubscribe, or change list options,
>visit: http://lists.midrange.com/mailman/listinfo/midrange-l
>or email: MIDRANGE-L-request@xxxxxxxxxxxx
>Before posting, please take a moment to review the archives
>at http://archive.midrange.com/midrange-l.