Shield Updates FTP Security Tool

by Alex Woodie

FTP, or File Transfer Protocol, is one of the most useful protocols the Internet Gods have provided. However, given FTP's open-source nature and its ubiquity, it also represents a serious security threat, especially for critical data being sent in an OS/400 network. The Ontario, Canada, software company Shield Advanced Solutions provides a utility called FTP Security Manager/400 that lets administrators control who has access to iSeries-based FTP. Last week, the company announced an update of that product, FTP Security Manager/400 Version 2.1.

FTP Security Manager/400 allows systems administrators to control which users are allowed to transfer files to and from AS/400 or iSeries servers. The software uses OS/400 exit points to capture and log all incoming and outgoing FTP requests. If a user fails to provide the correct password to access an FTP function, FTP Security Manager/400 automatically sends a message to QSYSOPR, the system administrator, alerting the administrator to take action.

With this latest release of FTP Security Manager/400, Shield has provided two main enhancements. First, it provides what Shield calls a "higher level of coverage" for IBM's FTP Client. But, more important, Shield now ships a new FTP Client of its own that simplifies how a user interacts with it. Shield has also changed the name of the software to prevent it from being confused with a similar product.

The new FTP Client can be configured so users can connect to remote systems and commence FTP transfers without having to remember passwords or connection information. Shield says the password and connection information is collected and displayed to the user in an easy-to-use panel group. Then the passwords are stored in an encrypted form and decrypted only when being sent to the remote site, which, Shield says, maintains security.

FTP Security Manager/400 also supports users logged on using "anonymous" profiles to engage iSeries FTP facilities, but this feature can be turned off if required. Administrators can also control the configured level of logging the software provides, to control excessive disk and data usage. Logs can be sent to a message queue, database file, or Integrated File System (IFS) file.

In November 2002, Shield changed the name of FTP Manager/400 to FTP Security Manager/400 to differentiate its product from Patrick Townsend & Associates' Alliance FTP Manager, which also provides administrative controls for OS/400 FTP facilities.

Licenses for FTP Security Manager/400 2.1 start at $750, which includes one FTP Client. For more information, visit Shield Advanced Solutions' Web site, at www.shield.on.ca.

Sponsored By RJS SOFTWARE SYSTEMS

Implement Document Imaging on your iSeries-AS/400 in 30 minutes or less Image Server/400 is a Web browser-based document image management system for the iSeries. Documents can be quickly scanned and stored in IFS folders, and then located and retrieved for viewing via any Web browser. Integrate with other iSeries-AS/400 applications. Call us at 888-RJS-SOFT or download a FREE fully functional demo from our Web site at www.rjssoftware.com