Re: Security, the AS/400 and the internet

SSL is implemented in the applications. VPN is implemented in
TCP/IP. With SSL, the encryption is done by each application. For
example, with the HTTP server, http://... gets you unencrypted pages
while https://... gets you encrypted pages. With VPN, everything that
travels between to two IPs is encrypted and the application is
completely isolated from it. I've heard that SSL requires less resources
with V4R4, but that will be addressed in future releases. You can
think of VPN as a hunting knife and SSL as a scalpel. You can
encrypt at 40-bit, 56-bit or 128-bit. With SSL you either have to
purchase a Digital Certificate like VeriSign or create your own. I'm
not sure how much effort that would be. With VPN, you install
the virtual device on your PC and then start it like a second DUN
connection. You start the first to your ISP and then the second to
the IP that you want your tunnel to. Pretty easy to do. Either VPN
or SSL on the AS/400 requires you to order additional products
from IBM - they are free though. I'd check the redbook site and
search for VPN or SSL.

Joe Teff

-----Original Message-----
From: Russell Conerly <rconerly@netdoor.com>
To: RPG400-L@midrange.com <RPG400-L@midrange.com>
Date: Wednesday, February 16, 2000 10:26 PM
Subject: RE: Security, the AS/400 and the internet


>One thought would be is to use Client Access Express.  This allows the use
>of a secure sockets layer (SSL up to 128 bit encription) telnet session.
>The SSL 128 software is a non-chargeable feature from IBM (better jump on
>this one).
>
>I've just dabbled with it but it might encourage you to dig farther.
>
>Russell Conerly
>SCB Computer Technology
>Tupelo, MS
>
>
>-----Original Message-----
>From: owner-rpg400-l@midrange.com [mailto:owner-rpg400-l@midrange.com]On
>Behalf Of boothm@earth.Goddard.edu
>Sent: Wednesday, February 16, 2000 9:00 PM
>To: RPG400-L@midrange.com
>Subject: Re: Security, the AS/400 and the internet
>
>
>Secure, compared to what?  If he can't give at least as much security as
>your company's phone lines, perhaps it would be worth while to shop around
>a bit.  If Domino can't do it, then Domino better get out of the business.
> The Internet has secure activities going on all day long, everywhere in
>the world.  e-business is happening. now. everywhere. He is burying his
>head if he thinks security isn't available.
>
>
>_______________________
>Booth Martin
>boothm@earth.goddard.edu
>http://www.spy.net/~booth
>_______________________
>
>
>
>
>"Sherry McMahon" <smcm@frontiernet.net>
>Sent by: owner-rpg400-l@midrange.com
>02/16/2000 09:03 PM
>Please respond to RPG400-L
>
>
>        To:     <RPG400-L@midrange.com>
>        cc:
>        Subject:        Security, the AS/400 and the internet
>
>
>This afternoon our IS department had a meeting with a fellow who is going
>to
>connect and setup several Domino (R5) servers and routers at various sites
>to our AS/400 (4.4).  I had been anticipating this because I live in
>another
>state and travel 120 miles a day and thought I finally could connect from
>home.  We were told during this meeting that there isn't any way to make
>my
>connection secure.  I find this very hard to believe.  Could someone
>direct
>me to information on this or the proper list to ask this question?
>
>Thank you,
>Sherry McMahon
>
>+---
>| This is the RPG/400 Mailing List!
>| To submit a new message, send your mail to RPG400-L@midrange.com.
>| To subscribe to this list send email to RPG400-L-SUB@midrange.com.
>| To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com.
>| Questions should be directed to the list owner/operator:
>david@midrange.com
>+---
>
>
>
>+---
>| This is the RPG/400 Mailing List!
>| To submit a new message, send your mail to RPG400-L@midrange.com.
>| To subscribe to this list send email to RPG400-L-SUB@midrange.com.
>| To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com.
>| Questions should be directed to the list owner/operator:
>david@midrange.com
>+---
>
>+---
>| This is the RPG/400 Mailing List!
>| To submit a new message, send your mail to RPG400-L@midrange.com.
>| To subscribe to this list send email to RPG400-L-SUB@midrange.com.
>| To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com.
>| Questions should be directed to the list owner/operator:
david@midrange.com
>+---
>

+---
| This is the RPG/400 Mailing List!
| To submit a new message, send your mail to RPG400-L@midrange.com.
| To subscribe to this list send email to RPG400-L-SUB@midrange.com.
| To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---