Re: pci review questions

[Ira Chandler <ira@xxxxxxxxxxxxx>]

Carol Woodbury's book on Security is the best reference we have seen on all
these topics.  We include a copy of her book in every customer
documentation delivery.
https://www.mc-store.com/collections/carol-woodbury/products/ibm-i-security-administration-and-compliance-third-edition

And the solution for telnet is correct, just secure it.

*Ira Chandler, PCI QIR, CPSP*

*CTO, Curbstone CorporationTechnical Services - 888-844-8533*


On Thu, Aug 20, 2020 at 11:58 AM iseriesstuff <iseriesstuff@xxxxxxxxx>
wrote:

> We had IBM come in and do an evaluation. Couple of items i have
> questions with.
>
> 1. Validate that Exit Programs on all network interfaces are set to
> block. Has anyone done this? If so, what exit points?
>
> 2. TLS/SSL secured versions of protocols exclusively. I know telnet (23)
> is an issue. We use client access for all our green screen access. Has
> anyone had to remove telnet for access to the iseries?
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com