Re: pci review questions -- MIDRANGE-L

× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.

Carol Woodbury's book on Security is the best reference we have seen on all
these topics. We include a copy of her book in every customer
documentation delivery.
https://www.mc-store.com/collections/carol-woodbury/products/ibm-i-security-administration-and-compliance-third-edition

And the solution for telnet is correct, just secure it.

*Ira Chandler, PCI QIR, CPSP*

*CTO, Curbstone CorporationTechnical Services - 888-844-8533*

On Thu, Aug 20, 2020 at 11:58 AM iseriesstuff <iseriesstuff@xxxxxxxxx>
wrote:

We had IBM come in and do an evaluation. Couple of items i have
questions with.

1. Validate that Exit Programs on all network interfaces are set to
block. Has anyone done this? If so, what exit points?

2. TLS/SSL secured versions of protocols exclusively. I know telnet (23)
is an issue. We use client access for all our green screen access. Has
anyone had to remove telnet for access to the iseries?

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.