RE: ODBC and CA dtf downloads run amok

Rick,  

Powerlock had a free trial version of their network security product that
gives full logging and auditing information for each server exit that it is
protecting.  Perhaps just collecting the access and usage info can give you
the necessary ammo you need to crank down on this stuff.  The full package
allows you to block certain connections for users or ip address ranges....  

hth,


Eric DeLong
Sally Beauty Company
MIS-Project Manager (BSG)
940-898-7863 or ext. 1863



-----Original Message-----
From: rick.baird@xxxxxxxxxxxxxxx [mailto:rick.baird@xxxxxxxxxxxxxxx]
Sent: Thursday, May 27, 2004 9:51 AM
To: midrange-l@xxxxxxxxxxxx
Subject: ODBC and CA dtf downloads run amok


Hey all,

Is there a way to log ODBC accesses to DB2/400 files?  not just some files,
but any file.

For years around here, people had been given pretty much free reign to
download production files to their pc, either by CA dtfs or MS Access via
ODBC, and it's really gotten out of hand.

There are literally hundreds of stray dtf files out on the network that
have been created/changed in the last couple years, and who knows how many
access databases.

All it takes is for 3 or 4 people to try downloading from a huge file using
an inefficient select clause to bring the system to it's knees, and 90% of
the time, the files they download reasonably static, or could be downloaded
once a day to a network drive and used from there.

I can't revoke the privileges without giving them a reasonable alternative,
but something has to be done to remedy this mess.

Any other suggestions on how to handle this would be appreciated.

thanks,

Rick


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.