RE: IBM FIREWALL

[jkrueger@xxxxxxxxxxxx]

>> Which Firewall are you running?  Is it installed on the AS400?  My point is
that I'm looking for a good way to secure our AS400 to eventually have it
connected to the internet.  From now on I'm lost, and I need some waypoint so we
can go on with our project.

In addition to purchasing and installing a good Firewall outside your AS/400,
with active, on-going administration and monitoring, you should also make sure
you have a reasonable level of security controls on the AS/400 itself.  If you
haven't begun working through all the associated issues, read the following two
manuals for starters:

http://publib.boulder.ibm.com/cgi-bin/bookmgr/BOOKS/QB3ACF03/CONTENTS

http://publib.boulder.ibm.com/cgi-bin/bookmgr/BOOKS/QB3ALC03/CCONTENTS

I don't generally recommend reading IBM manuals, but you asked for free
information, and since these are on the web, they qualify.  There are also some
very good independent books on AS/400 security, such as Implementing AS/400
Security by Carol Woodbury and Wayne Madden, ISBN: 1882419-78-2.

At some point, you will most likely figure out that you need to supplement the
core AS/400 security functions with things like server exit programs and
additional auditing.  When you do, there are a number of business partners who
offer enhanced security packages for the AS/400.  Most of those are listed on
the following web page:

http://www.as400.ibm.com/developer/tools/sysm.html#group10

Good luck!!! You're starting to ask the right questions...  People who wait to
ask about security after their web sites are live and they've been hacked are
just a tad bit too slow, so you're ahead of the game already!  (-;

Janet Krueger
Andrews Consulting Group


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---