RE: Alternate to iSeries

I disagree with the assumption - 2 disparate systems are LESS secure
than 1. 

If we ignore the additional complexity (which makes securing more
difficult) and the fact that you have 2 sets of patches that must be
maintained you still have potential issues. 

The machines have some sort of access to each other and the your
valuable data. This means (in general) that a vulnerability in one
server compromises the data. In most situations you are trying to
protect your data as a first priority and services as a second priority.

For example lets assume you have 1 AIX machine and 1 OS/400 machine and
that he following is true:
OS/400 has 4 vulnerabilities 
AIX has 6 vulnerabilities
Your data cannot be altered in such a way as to bring down your service

That means that your data is vulnerable to 10 possible attacks; your
service is vulnerable to 4 attacks.

If you only had AIX; your data is vulnerable to 6 possible attacks; your
service is vulnerable to 6 attacks.



-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Chris Bipes
Sent: Thursday, December 16, 2004 2:50 PM
To: 'midrange-l'
Subject: Alternate to iSeries

The owner of CrossCheck has asked me to find an alternate platform to
run our authorization system on.  It is an in-house grown RPGLE
application.
Does IBM offer an RPGLE compiler for their pSeries systems?  We will
still have our current iSeries based system but also offer a second
system running with a different OS.  The owner feels that if terrorist
were to ever hack iSeries and bring then down world wide, we would still
have our secondary system running.  He does not like any single point of
failure, which is why we have two locations across the US.  What other
systems can I run DB2 and RPGLE on?

Ok quit laughing 8-) he is serious.

Christopher K. Bipes
Manager of Systems Administration
CrossCheck, Inc.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.