Re: VPN questions

Well, it is impossible for you not to have a LAN.  Local Area Network.  If
people VPN into your AS/400, that means your AS/400 has to plug into a
switch (hub) and that switch has to connect to the router that is your
public internet connection.  That AS/400 and router connected to a switch is
a LAN, a small one, but a LAN none the less.

Now, before commenting on your complete risk factor, you need to get more
detailed and accurate. ;)

But tentatively, you need to lockdown what ports people need for the AS/400.
Like, if you don't specify other wise, VPN clients can FTP from and to your
system. They can try to interact with Netserver.  They can do database call
with MS ADO. Etc. Granted this is all depending on what you have running on
your system, but unless you specify what people are limited to, they have
full ability to try anything.

----- Original Message ----- 
From: "Chuck Lewis" <clewis@xxxxxxxxxx>
To: "'PC Technical Discussion for iSeries Users'" <pctech@xxxxxxxxxxxx>
Sent: Thursday, August 05, 2004 10:21 AM
Subject: RE: [PCTECH] VPN questions


> OK, I'll hop on this and Dan I am more in your league than the others :-)
>
> We have a VPN into our AS/400. Believe it or not, we have no local LAN of
> any type. We use the Cisco client and the 5250 client from Synapse.
>
> How at risk am I there ?
>
> Thanks !
>
> Chuck