RE: Buying an Exit point program

["Burns, Bryan" <burnsbm@xxxxxxxxxxxxxxxxxxxx>]

Thanks for gotcha Mike.

To go to 40, we would have to upgrade to MAPICS 6; we are on 5.5 now.  From
what I've heard, MAPICS upgrades are much, much, more work than an iSeries
O/S upgrade.  

We have three trustworthy programmers on staff but I think our biggest
threat is from a super user that "accidentally" changes a critical iSeries
file through ODBC or the like.

What great benefits could we expect at level 40?
  
-----Original Message-----
From: Mark A. Manske [mailto:mmanske@xxxxxxxxxxxxxxxxxx]
Sent: Friday, May 23, 2003 12:10 PM
To: 'Midrange Systems Technical Discussion'
Subject: RE: Buying an Exit point program


Bryan,

Might I suggest one other thing, bump to level 40 -
"if" Mapics will let you - some packages don't play well
with level 40 without some work, possibly more than you
may want to do at this time.

There are - many -  other security issues involved too.

Depending on how your system is running - ie: services running.

Do not forget to "work with":
FTP, Telnet, HTTP, REXEC, DHCP, TFTP, All ODBC flavors in-house (ie:showcase
has one, so does
Mircrosoft, so does IBM, ect....) , your IFS, workstation gateway, and
possibly other misc tcp/ip
protocol services.

As stated in another message, one "gothcha" is if you have anything
currently running that needs
any of the services you lock down - best is to run a log first of who is
doing what, been down
that road and bite before by things that where not know/documented.

Good luck.

Mark



-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Burns, Bryan
Sent: Friday, May 23, 2003 11:05 AM
To: 'Midrange Systems Technical Discussion'
Subject: RE: Buying an Exit point program


This is what we had in mind - block all OBDC by default and then open it up
individually.

We are at level 30 and run a MAPICS ERP system.  Users do not have command
line access.

_______________________________________________