MQSeries.net :: View topic - MQ SSL for Firewall

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » General Discussion » MQ SSL for Firewall

MQ SSL for Firewall

« View previous topic :: View next topic »

Author

Message

Shalini

Posted: Thu Jun 03, 2004 7:41 am Post subject: MQ SSL for Firewall

Master

Joined: 30 Apr 2002
Posts: 224
Location: India

Hi,

Websphere MQ SSL gives us out of box security.

For our set up we provide Firewall.

Would like to to know do we need to implement MQ SSL even though we have Firewall set up

Let me know the reason for same

jefflowrey

Posted: Thu Jun 03, 2004 8:25 am Post subject:

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

I imagine you need to configure your firewall to allow SSL traffic for MQSeries to Pass Through to the Internet.
_________________
I am *not* the model of the modern major general.

Shalini

Posted: Thu Jun 03, 2004 9:55 pm Post subject:

Master

Joined: 30 Apr 2002
Posts: 224
Location: India

Hi jefflowrey,

Thanks for your reply.

May be I have not put my question in a proper way.

Is there any valid reason (or any strong reason) to implement MQ SSL to the set up already having Firewall set up to it.

I mean is Firewall and SSL provide same type of security or both are diffrent in nature. If so what could be the valid reason for implementing the MQ SSL to the Firewall set up.

jefflowrey

Posted: Sat Jun 05, 2004 6:35 am Post subject:

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

A firewall keeps outside network traffic from coming inside your network.

SSL ensures that any network traffic is unreadable by someone sniffing packets.

SSL also ensures that the two parties involved in a network conversation can trust that they are talking to the right person at the other end.

Does it make sense at your location to use SSL to encrypt your internal traffic?

Does it make sense at your location to ensure that only specific queue managers can talk to each other, and that someone can't create a queue manager on their local machine, and connect it to your production queue manager network?

I don't know. What are your business requirements?
_________________
I am *not* the model of the modern major general.

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » General Discussion » MQ SSL for Firewall

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP