RE: WebSphere with Host on Demand Security concerns

If the programs are going to actually run on the Production machine, then
ost definitely bump up to level 40.  You also might look at tightening up a
couple of other items like TELNET, WSG, and some other goodies that get
turned on when someone puts in the command STRTCP and hits enter...

I don't know enough about webSphere to make any other recommendations. 

Joel R. Cochran
Director of Internet Services
VamaNet.com
800-480-8810 (va toll free)
540-885-8050 (phone)
540-886-1589 (fax)
www.vamanet.com
mailto:custservice@vamanet.com


>-----Original Message-----
>From: Cynthia M. Kovarik [mailto:ckovarik@bellsouth.net]
>Sent: Wednesday, August 08, 2001 6:10 PM
>To: MIDRANGE-L@midrange.com
>Subject: WebSphere with Host on Demand Security concerns
>
>
>We recently purchased a 270, running WebSphere Application Server
>Standard Edition and are in the process of setting up Host on Demand.
>Intent is to have our distributors place orders over the web, hitting
>our 270 first for HOD, then routing to production box for Order
>Processing programs.
>
>Question(s) ... what is the best security plan?  Should SSL be used?
>Should we use VPN?  270 is running OS/400 level 40 security but
>production box still at level 30.  Should production box be moved to
>level 40 first?
>
>Any and all feedback would be greatly appreciated.
>
>+---
>| This is the Midrange System Mailing List!
>| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
>| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
>| To unsubscribe from this list send email to 
>MIDRANGE-L-UNSUB@midrange.com.
>| Questions should be directed to the list owner/operator: 
>david@midrange.com
>+---
>
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---