Re: Is it possible to lock down ODBC connections?
Mike Cunningham <[email protected]> Thu, 10 Jul 2008 13:14:33 -0400
| Newsgroups | gmane.comp.systems.as400.security |
|---|---|
| Message-ID | <[email protected]> |
No, can't be sure but this is just the first line of defense which keeps out 99% of the people. We also lock down ODBC using Navigator and we use an exit point check (the Kisco product) to do a server side service level check to trap JDBC access as well. No individual user account is allow ODBC or JDBC connections and when we do allow it we create a special account that can only do ODBC/JDBC connections (no green-screen) and are restricted to one library that contains the files for that application -----Original Message----- From: security400-bounces-Zwy7GipZuJhWk0Htik3J/[email protected] [mailto:security400-bounces-Zwy7GipZuJhWk0Htik3J/[email protected]] On Behalf Of Walden H. Leverich Sent: Thursday, July 10, 2008 1:05 PM To: Security Administration on the AS400 / iSeries Subject: Re: [Security400] Is it possible to lock down ODBC connections? >.. p.s. or remove the ODBC driver from their PC. We only install 5250 emulation on our users PCs And you're SURE no user has installed the driver on their own??? :-) -Walden -- Walden H Leverich III Tech Software (516) 627-3800 x3051 [email protected] http://www.TechSoftInc.com Quiquid latine dictum sit altum viditur. (Whatever is said in Latin seems profound.) _______________________________________________ This is the Security Administration on the AS400 / iSeries (Security400) mailing list To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/security400 or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/security400. _______________________________________________ This is the Security Administration on the AS400 / iSeries (Security400) mailing list To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/security400 or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/security400.