ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzahj_5.4.0.1/rzahjrzahjsecpro.htm

47 lines
2.8 KiB
HTML

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="dc.language" scheme="rfc1766" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<meta name="dc.date" scheme="iso8601" content="2005-10-03" />
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow"/>
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<title>Protect your system in an APPN and HPR environment</title>
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
<link rel="stylesheet" type="text/css" href="ic.css" />
</head>
<body>
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
<a name="rzahjsec-pro"></a>
<h3 id="rzahjsec-pro">Protect your system in an APPN and HPR environment</h3>
<p>APPN networks provide open connectivity, and require minimal configuration
by each system in the network. When a system has a connection into an APPN
network, it can establish sessions with other systems that are connected within
that APPN network.</p>
<p>APPN reduces the physical, configuration barriers to communications. However,
you might want to build some logical barriers between systems in the network
for security reasons. This ability to control which systems can connect to
yours is often called <span class="bold">firewall support</span>. Network administrators
might use a variety of node types to specify which connections between APPC
locations are allowed. For example, you might want to allow SYSTEMB to communicate
with SYSTEMA and SYSTEMD, but not with SYSTEMC. For an explanation of this,
an example, and more information, see the following topics.</p>
<ul>
<li><a href="rzahjappnfilsup.htm#appnfilsup">APPN filtering support</a></li>
<li><a href="rzahjepsf1.htm#epsf1">Create a session endpoint filter</a></li>
<li><a href="rzahjrzahjcos.htm#rzahjcos">Class of service (COS) routing</a></li></ul>
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
</body>
</html>