Re: How to securely connect to IIS outside the firewall.

["Nathan M. Andelin" <nandelin@xxxxxxxxxxxxxxxxxxx>]

Hi Dave,

Maybe your situation is not clear to me.  It seems that you could just
provide a link on a Web page that referenced a program on your AS/400.  For
example, the following link runs a "Boat Report" program on my server:

http://www.relational-data.com/products/rweb/cgi/boatw/report.isp

As far as security is concerned, do you think that:

browser <==> IIS <==> OS/400

would be more secure than:

browser <==> firewall <==> OS/400

That's a question.

Nathan M. Andelin
www.relational-data.com


----- Original Message -----
From: "Dave Murvin" <davem@drme.com>
To: <midrange-l@midrange.com>
Sent: Sunday, February 03, 2002 5:35 PM
Subject: How to securely connect to IIS outside the firewall.


> I'm looking for any ideas on how I can connect to IIS or allow IIS to
> connect to the AS/400.
>
> The problem is that the IIS server is currently hosted by an outside
> provider and is outside the firewall.  Initially they are looking for info
> like order status, but they want to eventually get to direct order entry
> from the web.  They currently allow IIS to open up a direct read only
> connection to an Oracle data base that passes through a specific port in
> the firewall.
>
> The present configuration seems way to insecure to me for any connections
> to the AS/400.  If they move the IIS server in-house into the DMZ, then I
> think there could be several ways to communicate.
>
> I keep hoping they can get some infrastructure established and maybe go
> with Websphere, but this type of option has been dragging on for a long
> time and there doesn't seem to be any decision in the near future.
>
> In the mean time, are there any suggestions?
>
> Thanks.
>
> Dave Murvin
> DRM Enterprises, Inc.
> davem@drme.com