FTPSERV-E
Adds security to the FTPSERV product: control users, files, locations and IP addresses to be used, support generic users, log all actions and generate event-dependent messages routed to any post processor.
Overview
It is not a security breach to connect a Tandem system to a TCP/IP network, but it may cause security related problems.
Accessing a Tandem system, either through TELNET or FTP, always requires the requesting user to present his system known ID and corresponding password for authentication.
However, it might be necessary to restrict specific users from accessing the system through FTP, or from accessing specific files. Maybe a user should get access to FTP without having valid GUARDIAN credentials. Perhaps you need to allow a FTP session only from specific IP addresses, log FTPSERV activities without configuring Safeguard ACLs, or send action-dependent triggers to other programs when a file is received or transmitted.
Required features
- Control of system users (GUARDIAN and Alias users) accessing FTP
- Ability to grant FTP access to generic users (non-GUARDIAN users)
- Control of disk files that system and generic users are allowed to access
- Check of the IP address establishing a FTP session
- Audit of all security related FTPSERV events
- Optional support for dynamic passwords (TimeToken)
- Event-based message generation
The FTPSERV-E solution
GreenHouse has designed a library for the standard FTPSERV product, making it a security enhanced product. The library adds features to the standard functionality and allows complete control of FTP actions. It comes as a code 100, 700 and 800 library.
Management
Manage FTPSERV-E with the browser based management system iWAMS, the integrated Web Administration Management Suite, which allows central management of GreenHouse products within an EXPAND network.