Thanks for the responses. We have an MQ hub on our 'customer' network, and are now looking to allow other users connect to us over the Internet.
VPN doesn't appeal (to me) because a, we'd have to spend money, install and configure it, and b, so would everyone that wants to come in. So MQ/SSL, with an exit or two for good measure is the probable way we will go. That just leaves the question of whether the Internet connections come into a new (Internet-facing) hub qmgr, or just through IPT. IPT seems like it might be simpler to put in and administer... but apart from that I'm struggling to see any big pros/cons. Thanks Darren ----- Original Message ----- From: "Bill Anderson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, February 19, 2004 9:30 PM Subject: Re: MQIPT > Funny you should ask. As I write this, I am in the middle of setting up > MQIPT on my LINUX workstation to test it out. It looks easy enough, but we > will see. Right off the bat I got an error from an install shell script > complaining that it tried to install an LDAP application that conflicted > wit an already installed package. When I get it fired up, I'll let ya know > how it goes. > > The main alternative is VPN. Because it is by nature, a "secure" tunnel, > SSL is not required at the MQ level. But at least for an enterprise > implementation with extremely sensitive data, a "cheap" VPN solution may > not be secure enough. I have used VPN to remotely administrate MQ in the > past, but I really don't know allot about it technically. One of the > network security folks here told me just today that while the price range > is quite wide, $10,000 + would not be unheard of to implement a VPN > solution. Of course MQIPT is free, and what's a couple of servers to put it > on? $5,000 ? > > Personally, I like the MQIPT solution better (probably because I understand > it better). But on the other hand if a company has non-MQ reasons to > support a VPN into there private LAN, why not use it for MQ access as well? > performance possibly? > > > Anyway, good luck.... I have an MQIPT server to set up > > > Cheers > > Bill Anderson > SITA Atlanta, GA > Standard Messaging Engineering > WebSphere MQ Service Owner > 770-303-3503 (office) > 404-915-3190 (cell) > [EMAIL PROTECTED] > http://www.mconnect.aero/ > > > > Darren Douch > <[EMAIL PROTECTED] To: [EMAIL PROTECTED] > OM> cc: > Sent by: MQSeries Subject: MQIPT > List > <[EMAIL PROTECTED] > N.AC.AT> > > > 02/19/2004 02:41 > PM > Please respond to > MQSeries List > > > > > > > Trying to save myself some digging around.... any views on the pros / cons > of MQIPT vs. a full blown queue manager for supporting secure MQ > connections over the internet? > > And are there any views (or documents) about the performance / scalability > of MQIPT? > > Thanks folks. > Darren. > > Instructions for managing your mailing list subscription are provided in > the Listserv General Users Guide available at http://www.lsoft.com > Archive: http://vm.akh-wien.ac.at/MQSeries.archive > Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
