Re: How to securely connect to IIS outside the firewall.

if you got them to explain exactly how it's done with Oracle,
I think you will find it is either:
some middleware (like mq-series)
some proprietary sockets (which may have an iSeries equiv)
some basic odbc, jdbc or sql like interface that is not so secure.
jim franz

----- Original Message -----
From: "Dave Murvin" <davem@drme.com>
To: <midrange-l@midrange.com>
Sent: Tuesday, February 05, 2002 8:32 PM
Subject: Re: How to securely connect to IIS outside the firewall.


> Thanks for all the suggestions.
>
> Jim,
> I had thought of mq-series, but they are currently in a "I don't want to
> spend any money" mode, but will keep it in mind.
>
> Nathan,
> I don't think that
> browser <==> IIS <==> OS/400
> would cut it.  If I can get them to bring the IIS server into the DMZ then
> we would have something like this:
> browser <==> firewall <==> IIS <==> firewall <==> OS/400
> This is what we would like to get to, but there are problems with
> supporting and staffing an internal 24x7 Corporate web server at this
time.
>
> James,
> I had read the Gartner report recommending that IIS not be used, but they
> seem to be in a "hear no evil, see no evil" mode in regards to Microsoft
> products.  I try to point things out to them, but it falls on deaf ears.
I
> think they pretty much keep up with the MS patches and the McAfee
antivirus
> updates.
>
> Pete,
> I had not thought about ASNA visual RPG, but it sounds like we would still
> be talking to an unsecure IIS server.  I will take another look at ASNA.
>
> Walden,
> I will ask about the VPN option since they do have that ability for
regular
> users to dial in.  Your suggestion to punch a hole through the firewall
> sounds like what they do for the Oracle data base access from IIS, the
> network guy says that this scares the heck out of him.
>
>
> At 04:35 PM 2/3/2002, you wrote:
> >I'm looking for any ideas on how I can connect to IIS or allow IIS to
> >connect to the AS/400.
> >
> >The problem is that the IIS server is currently hosted by an outside
> >provider and is outside the firewall.
>
> Dave Murvin
> DRM Enterprises, Inc.
> davem@drme.com
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>