RE: Buying an Exit point program

[Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>]

There are several exit point security venders out there.  Yes blocking all
access via an exit point program can be done.  Then allowing users to have
read access to certain libraries and/or files is possible.  Setup depends on
the package you purchase.  Generally QSECOFR is needed to install an exit
point security package.  Be careful.  Default configuration may stop
production programs that use FTP or other TCP/IP functions from running.
Good one will have an audit only function that you can start with to see
what is being used before you lock down your system.  You also want good
audit reporting to see who is trying to access and accessing your system aft
wards.

Chris Bipes

-----Original Message-----
From: Burns, Bryan

We use menu level security on our iSeries, not resource or object level
security, and are looking into buying an exit point program.

What kind of set-up is involved in exit point programs?  We are wondering
what kind of time we need to devote to the process of securing our files
from ODBC, Client Access transfers, etc. with an exit point program.

Secondly, do we need to implement resource level security on the iSeries to
take advantage of an exit point program?  We can implement an exit point
program first and then tighten up security on the iSeries later, correct?