Re: Security NT vs AS/400

[John Earl <johnearl@xxxxxxxxxx>]

John Carr wrote:

>
>
> Here is a known fact: Only one version of Windows NT has ever met with U.S.
> C2 certification --
> Windows NT 3.5 with service pack 3. Even then, NT is only certified as a
> stand-alone system (noversion of
> network connection) on the Compaq Proliant 2000 and Proliant 4000 Pentium
> systems, and a
> DECpc AXP/150.

This is not unusual.  Only one version of OS/400 was certified as C2 compliant,
(V2R3 on an F-Model I believe?), because the effort involved in getting C2
certification is enormous.  C2 certification is really useless in a business
environment because the requirements include: no network connection, no
compilers, no query tools, and any tape or diskette device is under lock and
key.  C2 is just a marketing feather, and I don't know why any business (other
than the federal government ) would care about it.  The security measures
required to make a machine C2 compliant would effectively prevent that machine
from doing any usefull business.  I've never heard of an AS/400 outside the lab
that was C2 compliant.

But, if MS represented to the Feds that all versions of NT were C2 compliant 
they
were either naive or deceptive, and they've got big problems.

jte

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---