Re: IBM IP Addresses / Ports

I'm not arguing the need, Jim.  I'm saying that, in that environment, perhaps the better answer is to change the business process to completely isolate the firewall and use a DMZ, rather than hardcode IP addresses.  Because if that's a mission critical business system and IBM changes the IP, your client is down.

It seems like the auditor is asking you to build in a point of failure, is all.


On 3/30/2020 7:36 AM, midrangel@xxxxxxxxxxxxxxxxx wrote:

Joe,

While you and I might agree in principle, highly regulated environments have requirements most of us would not consider rational. When the auditor says, "I won't certify you if you don't......", you do as forced.

End of story.

--
Jim Oberholtzer
Agile Technology Architects

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Joe Pluta
Sent: Monday, March 30, 2020 7:29 AM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Subject: Re: IBM IP Addresses / Ports

Wow. That seems awfully Draconian as it defeats the purpose of DNS entirely.

Perhaps a better answer might be to use a machine in a DMZ to access those services, especially since IBM (or anybody else) could change their IP addresses at any time.


On 3/30/2020 7:16 AM, midrangel@xxxxxxxxxxxxxxxxx wrote:

A couple of my customers have put requirements it to lock down
inbound/outbound communications in their firewalls to only known addresses.
I've been asked for a list of IBM IPs and ports that need to be open.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com