ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » Ipaddress filtering for connecting to Queue manager

Post new topic  Reply to topic
 Ipaddress filtering for connecting to Queue manager « View previous topic :: View next topic » 
Author Message
pandeg
PostPosted: Thu May 28, 2015 12:44 pm    Post subject: Ipaddress filtering for connecting to Queue manager Reply with quote

Disciple

Joined: 21 Oct 2014
Posts: 195

Hi, Please let me know how efficient is ipaddress filtering at tcp/ips level compare to user id authentication.
Back to top
View user's profile Send private message
RogerLacroix
PostPosted: Thu May 28, 2015 1:35 pm    Post subject: Re: Ipaddress filtering for connecting to Queue manager Reply with quote

Jedi Knight

Joined: 15 May 2001
Posts: 3252
Location: London, ON Canada

pandeg wrote:
how efficient is ipaddress filtering at tcp/ips level

Filtering by IP address will be faster but that means ALL applications (good or bad or hackers) running on the server with the matching IP address will be allowed in.

pandeg wrote:
compare to user id authentication.

The is no such thing as "user id authentication". There is "UserID and Password authentication" which is far, far superior to simply using IP address filtering.

If you are protecting sensitive data then please use "UserID and Password authentication". And if you are worried about speed then buy more hamsters.

Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter
Back to top
View user's profile Send private message Visit poster's website
Vitor
PostPosted: Fri May 29, 2015 4:23 am    Post subject: Re: Ipaddress filtering for connecting to Queue manager Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

RogerLacroix wrote:
pandeg wrote:
how efficient is ipaddress filtering at tcp/ips level

Filtering by IP address will be faster but that means ALL applications (good or bad or hackers) running on the server with the matching IP address will be allowed in.


Or what appears to be the matching IP address. Apparently there's something called "spoofing" that's been developed....

RogerLacroix wrote:
pandeg wrote:
compare to user id authentication.

The is no such thing as "user id authentication". There is "UserID and Password authentication" which is far, far superior to simply using IP address filtering.




RogerLacroix wrote:
If you are protecting sensitive data then please use "UserID and Password authentication".


Or Google "SSL"

RogerLacroix wrote:
And if you are worried about speed then buy more hamsters.


One does wonder why the OP has decided the most worrisome bottleneck in the workflow is the authentication at the front rather than all of the rest of the code and components.

But then one reviews some of his other posts, and stops wondering.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
mqjeff
PostPosted: Fri May 29, 2015 5:11 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

It's always better to start your security at the network layer.

So a firewall, for example.

You can then use SSL to ensure that data passing across the network is readable by anyone with a network snoop.

It's not a bad idea to then use ip address filtering, so that you can confirm that the right network locations are allowed to connect.

You can then use UserID and Password Authentication to ensure that the right people have come in from the right set of network locations.

You can then use user mapping to ensure that those people have only and exactly the permissions they should have.

oh, did you think security was simple?
Back to top
View user's profile Send private message
bruce2359
PostPosted: Fri May 29, 2015 5:16 am    Post subject: Re: Ipaddress filtering for connecting to Queue manager Reply with quote

Poobah

Joined: 05 Jan 2008
Posts: 9394
Location: US: west coast, almost. Otherwise, enroute.

pandeg wrote:
Hi, Please let me know how efficient is ipaddress filtering at tcp/ips level compare to user id authentication.

Sounds a bit like an interview question...
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » Ipaddress filtering for connecting to Queue manager
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.