The target is too tempting, and the stakes are too high. With virtually every business doing some form of e-transaction, the amount of money flowing electronically is staggering. And a quick scan of the major news media Web sites indicates a serious number of recent computer security-related problems. You hear a lot about hackers breaking in and defacing Web sites, but how many break-ins do you not hear about? Those are potentially the most costly. Could hackers be on your competitor’s payroll system? It’s not a pleasant thought, but it’s something prudent businesses think about.
The AS/400 (a.k.a. the iSeries) is a very secure machine, but nothing’s invulnerable. IBM seems to do a great job making sure the machine is as secure as it can be, but there still can be problems. For example, there is code floating around the Internet that can be used to grab passwords. (See “IBM Posts Updated Security PTFs for ‘Son of Sniff’ ” on page 24 for more information.) In addition, the AS/400 doesn’t operate in a vacuum. When operating in a networked environment, user IDs and passwords often flow across the network. Those IDs and passwords often can be intercepted easily. If they’re not encrypted, they’re easy to read. If they’re LanMan passwords (the kind used in mixed Windows 95/98/NT/2000 networks), they, too, can be easy to crack with tools such as L0phtCrack, a well-known Windows password “audit” tool.
To minimize your exposure, you have to follow good security practices. A partial list of precautions includes the following:
• OS/400 object-level security (This is often overlooked.)
• A switched network (i.e., no hubs)
• A robust firewall (if you have a permanent Internet connection)
• A strong password policy
• Logging and auditing access
• Network monitoring tools to scan your network for unauthorized hosts and services (such as an FTP server or pcAnywhere)
• Good server-based virus scanning software
• The latest versions of and security-related patches for all of your software
Don’t become a headline. While it may or may not be possible to achieve 100 percent security, you can make your systems less of a target. Read this month’s focus articles on security and take the recommended steps.
Big IBM News
If you surf our Web site, you probably know by now that IBM has kicked off its Mach1 initiative, which promises to be a much-needed change in the way IBM presents itself to customers. (See “IBM Unveils E-server Advantage” on page 22 for complete details.) By creating the e-server line, IBM has further cemented its long-term commitment to e- business. One of the goals of the initiative is to enhance IBM’s internal cooperation and communication between divisions. This internal cooperation and communication has been getting stronger over the last few years, but it still needs improvement, especially for AS/400 customers, so this is welcome news.
What does this mean to the AS/400 professional? If IBM can enhance its focus on providing solutions to customers and achieve greater sales, we all benefit in the long term. In the short term, there is likely to be some hand-wringing over the future. Midrange Computing is here to help you understand the direction the industry is taking and to keep your skills sharp and up-to-date. The world may be going “e” at a rapid pace, and it may be difficult to determine what your next move should be, however, as I said in the May issue (see “From the Editor: Setting Standards”), no matter which platform you’re running on, standards enable us to get the job done. We’ll keep you up-to-speed on these standards, and we’ll continue to set the standard for delivering the vital information you need to accomplish your IT mission.
Big Midrange Computing News
We are very pleased to announce the addition of Richard Shaler to our lineup of section editors. He will be editing the Groupware section. Richard, a long-time writer for Midrange Computing, brings us AS/400 and NT-based Domino experience from the trenches. You can look forward to the same level of real-world, problem-solving articles on Domino and related technologies in the Groupware section that we give you in the rest of the magazine.
MC Press books written by Brian Singleton available now on the MC Press Bookstore.
 |
||
 |
|
i5/OS and Microsoft Office Integration Handbook Harness the power of Microsoft Office while exploiting the iSeries database. List Price $79.95 Now On Sale
|
More than ever, there is a demand for IT to deliver innovation. Your IBM i has been an essential part of your business operations for years. However, your organization may struggle to maintain the current system and implement new projects. The thousands of customers we've worked with and surveyed state that expectations regarding the digital footprint and vision of the company are not aligned with the current IT environment.
TRY the one package that solves all your document design and printing challenges on all your platforms. Produce bar code labels, electronic forms, ad hoc reports, and RFID tags – without programming! MarkMagic is the only document design and print solution that combines report writing, WYSIWYG label and forms design, and conditional printing in one integrated product. Make sure your data survives when catastrophe hits. Request your trial now! Request Now.
Forms of ransomware has been around for over 30 years, and with more and more organizations suffering attacks each year, it continues to endure. What has made ransomware such a durable threat and what is the best way to combat it? In order to prevent ransomware, organizations must first understand how it works.
Disaster protection is vital to every business. Yet, it often consists of patched together procedures that are prone to error. From automatic backups to data encryption to media management, Robot automates the routine (yet often complex) tasks of iSeries backup and recovery, saving you time and money and making the process safer and more reliable. Automate your backups with the Robot Backup and Recovery Solution. Key features include:
Business users want new applications now. Market and regulatory pressures require faster application updates and delivery into production. Your IBM i developers may be approaching retirement, and you see no sure way to fill their positions with experienced developers. In addition, you may be caught between maintaining your existing applications and the uncertainty of moving to something new.
IT managers hoping to find new IBM i talent are discovering that the pool of experienced RPG programmers and operators or administrators with intimate knowledge of the operating system and the applications that run on it is small. This begs the question: How will you manage the platform that supports such a big part of your business? This guide offers strategies and software suggestions to help you plan IT staffing and resources and smooth the transition after your AS/400 talent retires. Read on to learn:
LATEST COMMENTS
MC Press Online