We have not experienced this particular issue about virus being sent embedded in a file containing EDI documents using any communication protocol such as FTP, SFTP, AS/2. As mentioned most of the translators should filter these type of files. However infosec group was afraid of any scripts that were execueted before the EDI file was processed by the translators. This might introduce a risk of virus being introduced into your network through EDI process. Also, we received many EDI documents as attachments to email. There might be a risk if your EDI documents are received through Email as uu-encoded attachments. There is a risk out there, hence your infosec group might want to take the precausionary measures. Some of the measures we took are given below. a) Scanning the documents attached to email. b) FTP server for inbound traffic not exposed to the Internet. It was behind the firewall. c) We used higher ports (i think 5090) for AS/2 traffic instead of normal HTTP port 80. Thanks. Siva Raja Hibiz Solutions Inc.
To: [EMAIL PROTECTED]: [EMAIL PROTECTED]: Mon, 14 Jul 2008 16:38:17 -0400Subject: Re: [EDI-L] Has anyone seen a virus in an EDI file? Records Consulting, LLCPhone: 616.583.0090FAX: 888.205.2085Email: [EMAIL PROTECTED] forwarded message:> From: Dave Records <[EMAIL PROTECTED]>> Date: July 14, 2008 3:55:04 PM EDT> To: [EMAIL PROTECTED]> Subject: Re: [EDI-L] Has anyone seen a virus in an EDI file?>> I've never heard of such a thing, and wouldn't the file have to be > executed? The translator would throw it out immediately as it > would fail the valid EDI file test. For the most part, we use > secure ftp or VPN's to transmit and receive files so viruses are not > an issue unless you don't trust your trading partner! I do not > believe a virus could be introduced into an encrypted document or > tunnel. My 2cents worth working in automotive and transportation/ > warehousing. For a while the powers that be wanted us to use PGP > over ANX, the automotive network, but that is certainly redundant > encryption and they finally recognized that and backed off.>> Dave Records>>>>> On Jul 14, 2008, at 3:49 PM, Richard wrote:>>> Hi all,>>>> We're fighting quite a battle here at my company with the InfoSec>> (information security) folks and I could use some input from the >> group.>>>> The core issue is if an EDI file (X.12 format EDI document) could >> contain>> a computer virus, trojan horse, worm, etc.?>>>> I say that no they can't but our InfoSec folks say "they could". >> Hence,>> they're talking about requiring PGP encryption/decryption, SFTP/SSH>> transmittals, full anti-virus scan before use, etc.>>>> I could see the encrypted transmittal session(s) for security sake, >> but>> must I also pass a decrypted EDI file through an anti-virus software>> checker before I can pass it on to my translator and/or before I >> send it>> out?>>>> I'm curious what you've seen and/or what you're doing, especially if>> you've actually had a computer virus try to piggyback onto an EDI >> file.>>>> Any comments are much appreciated.>>>> Richard Jones>>>>>> >[Non-text portions of this message have been removed] _________________________________________________________________ The im Talkaton. Can 30-days of conversation change the world? http://www.imtalkathon.com/?source=EML_WLH_Talkathon_ChangeWorld [Non-text portions of this message have been removed] ------------------------------------ ... Please use the following Message Identifiers as your subject prefix: <SALES>, <JOBS>, <LIST>, <TECH>, <MISC>, <EVENT>, <OFF-TOPIC> Job postings are welcome, but for job postings or requests for work: <JOBS> IS REQUIRED in the subject line as a prefix.Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/EDI-L/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/EDI-L/join (Yahoo! ID required) <*> To change settings via email: mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
