ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » WebSphere Message Broker Security

Post new topic  Reply to topic
 WebSphere Message Broker Security « View previous topic :: View next topic » 
Author Message
Volvic
PostPosted: Wed Dec 16, 2009 6:52 am    Post subject: WebSphere Message Broker Security Reply with quote

Apprentice

Joined: 14 Oct 2009
Posts: 30

Hi everyone,

currently I am working on a security concept for our message broker shared platform. We will have clients communicate via MQ and HTTP. I will be able to control access to execution groups/message flows from MQ clients by MQ security exits (like blockIP2) without having to change code in clients.

The question is how do you control access for HTTP clients? I don't want everybody in my company to be able to call all services. In that case everyone would be able to for example get customer data.

What is the state of the art way of restricting access for web services? SSL? Or the new broker security manager? Any case studies or articles for this?
_________________
Volvic
Back to top
View user's profile Send private message
imakash
PostPosted: Mon Dec 28, 2009 10:16 pm    Post subject: Reply with quote

Newbie

Joined: 22 Dec 2009
Posts: 7

SOAP nodes access can be controlled using WS-Security . you will need to configure Security profiles and also policy sets and bindings.
Back to top
View user's profile Send private message
bobbee
PostPosted: Wed Dec 30, 2009 7:39 am    Post subject: Reply with quote

Knight

Joined: 20 Sep 2001
Posts: 545
Location: Tampa

I amat a client that has mandated all WS access is to come through Datapower. They will use DP for the security access. I am not familur with the internals of Datapower but this is not the first client that is doing this and I have been made aware in the past that DP has some significant securityfeatures.
Back to top
View user's profile Send private message Send e-mail AIM Address
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » WebSphere Message Broker Security
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.