RE: Buying an Exit point program

Somewhere this was documented rather clearly.  The help on WRKSYSVAL 
QSECURITY, then 2 to change, may help.  Not as clear as the other source 
that I may remember.

Rob Berendt
-- 
"They that can give up essential liberty to obtain a little temporary 
safety deserve neither liberty nor safety." 
Benjamin Franklin 





"Burns, Bryan" <burnsbm@xxxxxxxxxxxxxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
05/23/2003 01:24 PM
Please respond to Midrange Systems Technical Discussion
 
        To:     "'Midrange Systems Technical Discussion'" 
<midrange-l@xxxxxxxxxxxx>
        cc: 
        Fax to: 
        Subject:        RE: Buying an Exit point program


Thanks for gotcha Mike.

To go to 40, we would have to upgrade to MAPICS 6; we are on 5.5 now. From
what I've heard, MAPICS upgrades are much, much, more work than an iSeries
O/S upgrade. 

We have three trustworthy programmers on staff but I think our biggest
threat is from a super user that "accidentally" changes a critical iSeries
file through ODBC or the like.

What great benefits could we expect at level 40?
 
-----Original Message-----
From: Mark A. Manske [mailto:mmanske@xxxxxxxxxxxxxxxxxx]
Sent: Friday, May 23, 2003 12:10 PM
To: 'Midrange Systems Technical Discussion'
Subject: RE: Buying an Exit point program


Bryan,

Might I suggest one other thing, bump to level 40 -
"if" Mapics will let you - some packages don't play well
with level 40 without some work, possibly more than you
may want to do at this time.

There are - many -  other security issues involved too.

Depending on how your system is running - ie: services running.

Do not forget to "work with":
FTP, Telnet, HTTP, REXEC, DHCP, TFTP, All ODBC flavors in-house 
(ie:showcase
has one, so does
Mircrosoft, so does IBM, ect....) , your IFS, workstation gateway, and
possibly other misc tcp/ip
protocol services.

As stated in another message, one "gothcha" is if you have anything
currently running that needs
any of the services you lock down - best is to run a log first of who is
doing what, been down
that road and bite before by things that where not know/documented.

Good luck.

Mark



-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Burns, Bryan
Sent: Friday, May 23, 2003 11:05 AM
To: 'Midrange Systems Technical Discussion'
Subject: RE: Buying an Exit point program


This is what we had in mind - block all OBDC by default and then open it 
up
individually.

We are at level 30 and run a MAPICS ERP system.  Users do not have command
line access.

_______________________________________________
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.