Are we as secure as we should be?

From your PC, let's find out by using MS Excel and take advantage of the pre-defined ODBC driver

1. Open a new MS Excel worksheet
2. Go to the "Data" pull down menu
3. Select "Transfer Data from AS/400"
4. Under "Transfer Request", select "Create New" & click OK
5. Enter your "SystemName" & click Next
6. Enter Library & file member: QGPL/QCLSRC(QSTRUP) & click Next
7. Under "Customize File Transfer" just click Next
8. Under "Save Request to File" type anything.. testabc & click FINISH
9. Sign-on as any valid AS/400 user

And there...  A very important AS/400 system file on your PC...

 

Now, let's find out by using FTP

 

1. Open up a DOS window. (Go to Start, run, and type "command", enter.)
2. At the C:\Windows prompt, type FTP and your IP address or system name. (Example: ftp 193.163.1.105 or FTP DEVSYS) Now, sign-on as any valid AS/400 user.
3. Use the DOS cd command to change your current library to QGPL. CD QGPL You have now changed the library to the AS/400's QGPL.  Now the fun begins!!!
4. Use the DOS command dir to display library QGPL. Do you see all the objects? You now have the ability to download them to your PC, change them and bring them back to the 400..
5. Now, let’s use FTP's get command to pull a common file off of the AS/400 and put it in your PC. Type: get qddssrc.qdsignon c:\as400tst.txt
6. And just like that, you now have an AS/400 source file on your PC’s C:\drive. You can use Word or Notepad to view it on your PC. Pretty scary stuff, huh?
7. Remote Commands are also available. This means that users can type commands on their PC's and have those commands execute on the AS/400. Type: quote rcmd crtlib MYLIB123. You created a library called MYLIB123 on your AS/400. Now, use any AS/400 interface to view the new created library.
8. Now, let's put something into the library you just created with the FTP put command. Type: put c:\autoexec.bat MYLIB123/autoexec.bat

Sure enough, your AUTOEXEC.BAT file is now on the AS/400 in library MYLIB123

9. Now, for the real fireworks.... Let's get rid of all this stuff by typing: quote rcmd dltlib MYLIB123   And just as you thought!!  The library is now deleted. Type " bye" or "quit" to exit FTP.

Welcome to the security-prone world of TCP/IP networking on the AS/400.

If you were successful in even one of these tasks, it's time to deploy exit programs.

We realize that your management position requires you to look at options that make employees accountable, efficient and is cost-effective. SECURE/NET meets all of your options.

• Extremely easy to install (10 minutes)

• Works in conjunction with OS/400 security

Give us a call. 1-800 762-3696