RE: SSL vs VPN for CA/400

["Orr, Rod" <ROrr@xxxxxxxxxxxxxx>]

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
--
[ Picked text/plain from multipart/alternative ]
Roger,
this is not my area of expertise, so take accordingly

My understanding is that SSL is only relevant if the particular tcpip appl
you have now and you want to use (e.g. telnet, ftp etc), is explicitly
enabled for SSL (at both ends), wheras a VPN can provide a secure "tunnel"
for any tcp application. Its not a given that all tcp appl's support ssl, or
the particular one you have at either end does. Some products don't support
it and some may charge extra for the feature.

Rod Orr

-----Original Message-----
From: Roger Vicker, CCP [mailto:rvicker@vicker.com]

For an AS/400 (V5R1M0) tucked behind a firewall would using SSL be
that much more of a risk than using the firewall's VPN upgrade and
clients? By opening the needed SSL ports and issuing the certificates
the cost would be minor compared to VPN. The expected users would not
need access to other protected network resources so that added
capability of VPN is not needed.