Basic security steps in light of recent world events

Rob, as usual (smiling) you beat all of us to the punch that received Steve Pitcher's ITech Solutions security briefing yesterday.
As usual, Steve provides good insight.

My list of IBM i partition safeguards (as best as I can) is ...
Our IBM i partition root directory is not mapped.
We do not share our partition root directory.
We do not share ANY IBM "Q" directory.
Our user directories are all public *exclude.
We have no IBM Netserver shares.
We do not have Netserver guest profiles.
We use Kerberos SSO via EIM.
NO user has IOSYSCFG authority so user's cannot map IBM i directories.
We've engineered 5250 sessions to port 992 - SSL. Nothing comes through port 22. Our HMC console sessions are through port 2301 - SSL.
This took some certificate installation / implementation work.


Very Respectfully,
Michael Mayer
IBM i on Power System Admin.
IT Operations.
The Florida Bar
651 E. Jefferson St
Tallahassee, Florida 32399-2300
mmayer@xxxxxxxxxxxxxx
https://www.floridabar.org
Office: 850.561.5761
Cell: 518.641.8906
https://ibmireference.blogspot.com/

----------------------------------------------------------------------------------------------------------------------------------

4. Basic security steps in light of recent world events (Rob Berendt)

----------------------------------------------------------------------

In light of the events going on in the Ukraine these are some good ideas for IBM i professionals.
Note: I do not have any financial interest in iTech.
https://www.itechsol.com/february-2022-ibm-i-security-alert/


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com



________________________________
Please note: Florida has very broad public records laws. Many written communications to or from The Florida Bar regarding Bar business may be considered public records, which must be made available to anyone upon request. Your e-mail communications may therefore be subject to public disclosure.