RE: AS400 Hardening Guidelines

["Rosado, Rafael (Rafael)" <rarosado () lucent com>]

Jason,

Go to IBM's web site, Redbooks Section and you will find several Redbooks on
OS/400 Security you can use as a basis for developing an AS400 Hardening
Guide:

An Implementation Guide for AS/400 Security and Auditing: Including C2,
Cryptography, Communications, and PC Connectivity -
http://www.redbooks.ibm.com/redbooks/pdfs/gg244200.pdf

AS/400 Internet Security: Protecting Your AS/400 from HARM in the Internet-
http://www.redbooks.ibm.com/redbooks/pdfs/sg244929.pdf

AS/400 Internet Security Scenarios: A Practical Approach -
http://www.redbooks.ibm.com/redbooks/pdfs/sg245954.pdf

AS/400 Internet Security: Developing a Digital Certificate Infrastructure -
http://www.redbooks.ibm.com/redbooks/pdfs/sg245659.pdf

The System Administrator's Companion to AS/400 Availability and Recovery - 
http://www.redbooks.ibm.com/redbooks/pdfs/sg242161.pdf

AS/400 Internet Security: Implementing AS/400 Virtual Private Networks -
http://www.redbooks.ibm.com/redbooks/pdfs/sg245404.pdf

Enjoy!  Wouldn't mind as a "thank you" and as a reviewer to receive a copy
of the hardening guide once you have developed it... ;-)

Rafael Rosado, CISSP, CISA
Security Consultant
Lucent Worldwide Services
Business Consulting
Reliability and Security Services
Voice: 954-885-2176 
Email: rarosado () lucent com 
http://www.lucent.com/security/
http://www.lucent.com/solutions/sec_sol_sp.html

This e-mail message and any attachment(s) to it are intended only for the
use of the addressee(s).  The information in this e-mail message is
confidential and proprietary and may be subject to legal privilege.  The
reading or dissemination of this email by anyone other than the intended
recipient is strictly prohibited.  If you believe you have received this
e-mail in error, please notify the sender immediately and permanently delete
this e-mail, any attachments and all copies thereof from any drives or
storage media and destroy any printouts. 
-----Original Message-----
From: Jason.Burzenski () americanhm com [mailto:Jason.Burzenski () americanhm com]

Sent: Wednesday, November 24, 2004 11:45 AM
Subject: AS400 Hardening Guidelines

Greetings All,

I am trying to develop an AS400 (or would this be more properly titled OS400
hardening?) hardening standard for my organization. I am not very familiar
with this platform and was wondering if the community could recommend links
or sites on the subject of AS400 hardening.

Thanks,


Jason