Hi all, We have over 200 users requiring client connection from their Windows2000 workstations to the queue managers on Windows 2000 (WMQ 5.3). The company does not have and is unwilling to buy any third product right now or in the foreseeable future.
I have set up 10-15 users with a dedicated SVRCONN channels with the MCUSER set to their respective userids and giving each userid a limited access. I have started using BlockIP2 as well. I have brought up the use of SSL but the company is reluctant to do that (I don t know about all the concerns surrounding the issue probably something political that I don t get involved in as a contractor). Because I want to make the client connections as secure as possible with what I have at my disposal, I feel that I should set up the rest of the 200 clients (most of whom will be in the Prod env.) the same way as the others: Dedicated svrconn channel with MCAUSER populated with a userid having limited access, and IPBlock2. But then again, since all of the interfaces are internal, maybe I could dedicate 1 svrconn to, say, 20 people. I can still give limited access to the users, leave the MCUSER blank and specify the valid IP addresses in IPBlock2. What do you think? Any ideas/insights would be much appreciated. Thanks in advance, Ruzi Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
