Re: virus scan files uploading to ifs

Some of the exit point vendors are the same people we are looking for in
2FA/MFA products. Sure, 5250 is usually handled by an initial program tied
to the user profile. But ftp, odbc, etc use their respective exit points.
In summary, if 2FA/MFA might be on your horizon, you might want to make
sure your exit point product at least has that as an option.

On Wed, Nov 29, 2023 at 11:53 AM Jim Franz <franz9000@xxxxxxxxx> wrote:

with so many vendors moving to subscription its worth a look. Are there
other vendors to consider besides Fortra and Raz-Lee?
This is a lights out system - runs by itself with little maintenance,
except ptfs, and the ssl keys each year.
Jim

On Wed, Nov 29, 2023 at 11:38 AM VERNON HAMBERG Owner via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

Hi Jack


Are there open-source antivirus apps in the repository that could be
called from the exit point? Maybe this would simplify or make less costly
handling scans for this.


Cheers
Vern


On Wed, 29 Nov, 2023 at 10:22 AM, Jack Woehr via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:


To: midrange systems technical discussion
Cc: jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx
The problem you describe is real. IBM i IFS can easily become a vector

for

virus spread among your Windows clients.
Yes there are exit points for virus scan

https://www.ibm.com/docs/en/i/7.5?topic=support-examples-scanning-viruses-files-being-opened

AFAIK your choices are "write it yourself" or "buy a package".
Powertech Antivirus (Fortra) comes to mind.

On Wed, Nov 29, 2023 at 8:57 AM Jim Franz <franz9000@xxxxxxxxx<mailto:
franz9000@xxxxxxxxx>> wrote:

We have spreadsheets and other documents uploaded (for many years) to

the

ifs to support orders. Without getting into big $$$ for a package suite

of

security tools, are there tools to scan files as they are uploaded. The
spreadsheets (.xlsx) are read by rpgle to extract the rows. The other

docs

may be opened by users to view using web browser, RPGLE CGI programs
handling the upload.
Have seen reference to the exit points to scan files on open or close.
single small system, 1 lpar, local drives, V7.5

Jim

--

*JACK WOEHR, IBM Champion 2021-2023
<https://www.credly.com/users/jack-woehr/badges><
https://www.credly.com/users/jack-woehr/badges>>*

*SENIOR IBM i ENGINEER*

303.847.8442
jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx<mailto:jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx>
<https://www.linkedin.com/in/jackwoehr/><
https://www.linkedin.com/in/jackwoehr/>> stay connected
<https://www.linkedin.com/company/absolute-performance-inc./><
https://www.linkedin.com/company/absolute-performance-inc./>>

<https://www.absolute-performance.com/><
https://www.absolute-performance.com/>>
www.absolute-performance.com

NON-DISCLOSURE NOTICE: This communication including any and all
attachments is for the intended recipient(s) only and may contain

confidential and privileged information. If you are not the intended
recipient of this communication, any disclosure, copying further

distribution or use of this communication is prohibited. If you received
this communication in error, please contact the sender and

delete/destroy all copies of this communication immediately.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx<mailto:
MIDRANGE-L@xxxxxxxxxxxxxxxxxx>
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx<mailto:
MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx>
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx<mailto:
support@xxxxxxxxxxxxxxxxxxxx> for any subscription related questions.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.