RE: Telnet concerns from auditors

Setting up SSL Telnet would mean using the Digital Certificate Manager,
correct? Is that an administrative nightmare for hundreds of users, or is
there a method of using a 'blanket' cert that would cover an entire box?

Thanks, Larry

Larry Ketzes | Senior iSeries System Administrator | AIG / ALICO - American
Life Insurance Company
One ALICO Plaza, 600 N. King Street, AMIS | Wilmington, DE 19801 | *:
302.594.2146 | 7: 302.830.4524| *: larry.ketzes@xxxxxxx


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of David Gibbs
Sent: Thursday, October 02, 2008 3:22 PM
To: Midrange Systems Technical Discussion
Subject: Re: Telnet concerns from auditors

Ketzes, Larry wrote:

Has anyone had to explain to an auditor the use of telnet by users to get

to

the iSeries? Our auditors are saying they are very concerned about our

use

of telnet.
Would I be correct in saying the risk the auditors are concerned
about is the ID and Password being sent in clear text? This is corrected,
of course, by using the 'bypass signon' feature in iSeries Navigator.
Is there any other thing about telnet that they would be concerned
about?

Have you considered using SSL telnet? That way nothing is sent in the
clear.

One problem with using the bypass signon feature is that, if the user signs
off, they get a signon screen and have to send the userid & password in the
clear.

david