RE: systools. group_ptf_currency Secuirty Concern Responses

Ordering PTFS via SNDPTFORD goes over a VPN or other secure channel to IBM. IBM has the request for the systools view go out of regular internet channels. We get our CUM packages from our main software vendor as they vet them for their software and add additional PTFs when necessary for their software to work. I generally order the Java, HTTP, Security and HIPER group packages monthly (and sometimes others depending on the situation). I was looking at using the systools view to have an easily accessible tool that can tell me what I can order that I don't already have installed or waiting to apply. I don't generally compare individual PTFs, just the groups.

Coy Krill
Core Processing Administrator/Analyst
Washington Trust Bank


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jack Kingsley
Sent: Tuesday, October 20, 2015 12:34
To: Midrange Systems Technical Discussion
Subject: Re: systools. group_ptf_currency Secuirty Concern Responses
Importance: Low

How are you downloading and installing fixes. Do you have to remote query IBM to do your local compare for PTF's.

On Tue, Oct 20, 2015 at 3:04 PM, Krill, Coy <CKrill@xxxxxxxxxxx> wrote:

I had our network folks open the firewall so that our Production, Test
and DR machines could access
http://www-912.ibm.com/s_dir/sline003.nsf/PSPbyNumL.xml?OpenView&count
=500 and have the systools.group_ptf_currency view work properly.I've
now been requested to meet with our security folks regarding this
request.

I assume that they are going to have security concerns and are
potentially looking to block this site again. Has anyone had to
respond to any inquiries from security or auditors regarding loading
the xml table from IBM? It seems pretty innocuous to me, but perhaps
I'm missing something larger but in any case I'd like to be prepared
to assuage any security concerns as I would really like to use this
view rather than having to compare a 5250 screen to a webpage every month.

Coy Krill
Core Processing Administrator/Analyst
Washington Trust Bank



---------------------------------------------------------------------
This electronic mail message and any attachments may contain
confidential or privileged information and is intended for use solely
by the above-referenced recipient. Any review, copying, printing,
disclosure, distribution, or other use by any other person or entity
is strictly prohibited under applicable law. If you are not the named
recipient, or believe you have received this message in error, please
immediately notify the sender by replying to this message and delete
the copy you received

---------------------------------------------------------------------

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.



---------------------------------------------------------------------
This electronic mail message and any attachments may contain confidential or privileged information and is intended for use solely by the above-referenced recipient. Any review, copying, printing, disclosure, distribution, or other use by any other person or entity is strictly prohibited under applicable law. If you are not the named recipient, or believe you have received this message in error, please immediately notify the sender by replying to this message and delete the copy you received

---------------------------------------------------------------------