Newsletters   Subscriptions  Forums  Store   Career  Media Kit  About Us  Contact  Search   Home 
fhs
Volume 5, Number 13 -- March 29, 2005

BOS Adds Security Features to Emulation Products


by Dan Burger


Security for iSeries 5250 emulation is getting a closer examination as companies are becoming wise to the fact that a majority of security breaches are internal rather than external. To address this issue, Better On-line Solutions (BOS) has enhanced its 5250 Client software, BOSaNOVA TCP/IP, with the added security of 128-bit SSL Encryption, a centralized manager module, and single sign on. The new product is named BOSaNOVA Secure, however, existing BOSaNOVA TCP/IP users can also add the security features to their existing systems.

The SSL (Secure Sockets Layer) encryption makes use of a private key that allows it to encrypt data that's transferred over the SSL connection, which provides secure display and printer sessions by connecting to the iSeries SSL Telnet Port 992.

The manager module centralizes monitoring and management of remote workstation client emulations and provides user-profile and user-authentication control, as well as allowing users to synchronize with a Windows server. For instance, after a user logs on to a domain, the manager module identifies where that workstation is and what its settings are. It provides the capability to mange many TCP/IP options such as image mapping, keyboard mapping, macros, SQL-based data file transfer, and many others. This management can be done at both the individual and group levels. The manager module is also a convenient tool for future updating of distributed copies of the BOSaNOVA Secure product as well as a method for locking out user changes to the software.

The single sign on (SSO) capability adds a valuable benefit by allowing users to synchronize their Windows servers and iSeries server authentication, which eliminates the need to memorize multiple user ID and password combinations. Based a series of security tickets that are generated by the SSO process, when a user first logs on, he is automatically logged on to the prescribed iSeries access. SSO also allows multiple applications to be synchronized to one database, user ID, and password.

In a situation where a user needs to refresh a password every 30 days for security reasons, that means the domain password and other passwords need to change as well. Without SSO there are many log in passwords for many systems. Several well-publicized studies have shown the administration of lost or forgotten passwords is an expensive procedure that cuts into productivity and profits. SSO also eliminates the tendency that people have to place sticky notes around their workstations to remind them of passwords. Directions that non-authorized workers can also easily follow.

Single sign on, a desirable security feature built in to OS/400 V5R3, is supported with Kerberos authentication and Enterprise Identify Mapping technologies. It is installable on Windows 2000/2003 servers with Active Directory and provides support for 9x/ME stations via MIT Kerberos, a second Kerberos standard that is found in some mixed environments.


In the real world, most IT administrators and staff are not yet up to speed on the implementation of single sign on. However, indications are that it is rapidly gaining popularity. Training is available through COMMON, IBM, and other sources.

The pricing for BOSaNOVA Secure in North America has yet to be announced. BOSaNOVA TCP/IP, without the security enhancements, sells for $155 per copy. For more information, visit www.boscorporate.com.

Sponsored By
NUBRIDGES

Take Control of Securing Your Transactions

Take control of any secure FTP process with the most comprehensive FTP client/server solution available. truExchange FTP offers solid security, an abundance of encryption options and unmatched firewall navigation capabilities to give you total control of the way you exchange FTP transactions. truExchange FTP allows you to automate, control and manage FTP processes with any remote FTP server, as well as manage your internal FTP processes.

truExchange FTP's command-driven interface for FTP client scripting makes it possible to automate any FTP process through one script that includes user defined recovery within the session. The FTP Server can either replace, or run next to, the native iSeries server. The difference is that unlike the native server, truExchange FTP provides host-based control for file naming, formatting tracking, automatic application processing and features that allow you to run your FTP processes while allowing your iSeries to be as secure as possible.

truExchange FTP is perfect for connecting to EDI VANs, EDI trading partners, banks and other financial organizations, as well as healthcare related organizations who are mandating HIPAA compliancy. Also compliant with Sarbanes-Oxley requirements, the software offers add-on encryption bundles that keep transmitted information secure-critical for organizations trying to protect their own data, as well as guaranteeing security to customers and partners.

At nuBridges, security is a key component in the design and delivery of our solutions and services. Businesses that rely on digital exchanges depend on secure, reliable connections. That's why we take security so seriously. nuBridges' security software locks down information at every level in the pipeline.

Encryption Bundles
Encryption is a popular and effective method for providing security over the Internet. The encryption process alters data so only the intended recipient can read or use it. The recipient of the encrypted data must have the proper decryption key and program to decipher the data back to its original form. With the most encryption options in the market, our solutions secure businesses from losing valuable information and keeping it out of the hands of intruders. Our AS3 certification validates our approach to enhanced features such as built-in support for firewall navigation.

Do you need S/MIME (Secure/Multipurpose Internet Mail Extensions) to provide encryption and digital signatures for Internet mail messages? Perhaps SSL/TLS (Secure Sockets Layer/Transport Layer Security) provides the security encryption you want to secure message transmissions between two applications. The standard for a number of organizations, most notably financial services and healthcare is PGP (Pretty Good Privacy). And, SSH (Secure Shell) encrypts all traffic through secure tunnels between companies and their trading partners. Whatever encryption method suits your particular requirements, truExchange products offer the broadest range of options available.

About PGP and SSH
Written and ported specifically for the iSeries platform in partnership with PGP Corporation, truExchange PGP offers the same capabilities found in PGP Corporation's product line, but it has the look and feel that iSeries users expect. Many organizations adopt PGP as their encryption standard to secure confidential and critical transactions.

Offering customers the quickest, most cost-effective solution for implementing SSH on the iSeries platform, truExchange SSH fits directly into any environment. Our solution eliminates the need to understand encryption, easily addresses critical customer security mandates and provides immediate ROI.

Whether transacting with a financial services firm, complying with multiple mandates or connecting with your trading partners, nuBridges' FTP solution offers the one solution to fit your needs.

Contact nuBridges or visit our Web site.


Editor: Alex Woodie
Contributing Editors: Dan Burger, Joe Hertvik,
Shannon O'Donnell, Timothy Prickett Morgan
Publisher and Advertising Director: Jenny Thomas
Advertising Sales Representative: Kim Reed
Contact the Editors: To contact anyone on the IT Jungle Team
Go to our contacts page and send us a message.


THIS ISSUE
SPONSORED BY:

ProData Computer Svcs
SoftLanding Systems
nuBridges
Goering iSeries Solutions
Asymex


Four Hundred Stuff

BACK ISSUES

TABLE OF
CONTENTS
Q4bis Streamlines BPCS Reporting for U-Bix Konica Minolta

eStorage Joins the VTL Party with the Maxback 4576

BOS Adds Security Features to Emulation Products

SPSS Boosts OLAP Performance with ShowCase Suite 7.0

News Briefs and Product Shorts


The Four Hundred
More on IBM's eServer i5 Plans for 2005 and 2006

Used OS/400 Software a Small But Growing Market

Sun Takes Baby Steps Closer to Open Source Java

Four Hundred Guru
Existence Tests and Left Exception Joins

Where Did I Come From?

Wanted: Native RPG and COBOL Support for Browsers

Four Hundred Monitor


Copyright © 1996-2008 Guild Companies, Inc. All Rights Reserved.
Guild Companies, Inc. (formerly Midrange Server), 50 Park Terrace East, Suite 8F, New York, NY 10034
Privacy Statement