| |
Fortress/400
- How Secure are You? |
|
Please do not attempt this unless you are authorised
to perform IBM System i (A/S400) security functions
Are we as secure as we should be?
Let's use FTP:
1. Open up a DOS window. (Go to Start, run, and
type "command", enter.)
2. At the C:\Windows prompt, type FTP and your IP
address or system name. (Example: ftp 193.163.1.105
or FTP DEVSYS) Now, sign on as any valid AS/400
user.
3. Use the FTP cd command to change your current
library to QGPL. CD QGPL You have now changed the
library to the AS/400's QGPL. Now the fun begins!!!
4. Use the FTP command dir to display library QGPL.
Do you see all the objects? You now have the ability
to download them to your PC, change them and bring
them back to the 400..
5. Now, let’s use FTP's get command to pull
a common file off of the AS/400 and put it in your
PC. Type: get qddssrc.qdsignon c:\as400tst.txt
6. And just like that, you now have an AS/400 source
file on your PC’s C:\drive. You can use Word
or Notepad to view it on your PC. Pretty scary stuff,
huh?
7. Remote Commands are also available. This means
that users can type commands on their PC's and have
those commands execute on the AS/400. Type: quote
rcmd crtlib security1. You created a library called
security1 on your AS/400. Now, use any AS/400 interface
to view the new created library.
8. Now, let's put something into the library you
just created with the FTP put command. Type: put
c:\autoexec.bat security1 Sure enough, your AUTOEXEC.BAT
file is now on the AS/400 in library security1
9. Now, for the real fireworks.... Let's get rid
of all this stuff by typing quote rcmd dltlib security1.
And just as you thought!! The library is now deleted.
Type " bye" or "quit" to exit
FTP.
Welcome to the security-prone world of TCP/IP networking
on the AS/400.
If you were successful in even one of these tasks,
it's time to deploy exit programs.
We realise that your management position requires
you to look at options that make employees accountable,
efficient and is cost-effective. Secure/Net meets
all of your options.
 Extremely
easy to install (10 minutes)
Works
in conjunction with OS/400 security
NO IPL
needed
|
|
|
| |
|
|
|
