Re: How to securely connect to IIS outside the firewall.

[Dave Murvin <davem@xxxxxxxx>]

Thanks for all the suggestions.

Jim,
I had thought of mq-series, but they are currently in a "I don't want to
spend any money" mode, but will keep it in mind.

Nathan,
I don't think that
browser <==> IIS <==> OS/400
would cut it.  If I can get them to bring the IIS server into the DMZ then
we would have something like this:
browser <==> firewall <==> IIS <==> firewall <==> OS/400
This is what we would like to get to, but there are problems with
supporting and staffing an internal 24x7 Corporate web server at this time.

James,
I had read the Gartner report recommending that IIS not be used, but they
seem to be in a "hear no evil, see no evil" mode in regards to Microsoft
products.  I try to point things out to them, but it falls on deaf ears.  I
think they pretty much keep up with the MS patches and the McAfee antivirus
updates.

Pete,
I had not thought about ASNA visual RPG, but it sounds like we would still
be talking to an unsecure IIS server.  I will take another look at ASNA.

Walden,
I will ask about the VPN option since they do have that ability for regular
users to dial in.  Your suggestion to punch a hole through the firewall
sounds like what they do for the Oracle data base access from IIS, the
network guy says that this scares the heck out of him.


At 04:35 PM 2/3/2002, you wrote:
>I'm looking for any ideas on how I can connect to IIS or allow IIS to
>connect to the AS/400.
>
>The problem is that the IIS server is currently hosted by an outside
>provider and is outside the firewall.

Dave Murvin
DRM Enterprises, Inc.
davem@drme.com