Without knowing fully your actually purpose of giving remedy access to 
public internet, if remedy cannot provide all the security features that 
your company needs for public internet then can't you have an in house 
developed webapplication with only the subset of  features that public 
internet users need and then integrate with remedy from the back end?
And for internal company usage I do not think you need all the security 
restrictions that you need for public internet.
Apart from above the following are my 2 cents on your bullets.

2. Improper Error Handling 

I know we cannot handle each and every error in the manner we want without 
the vendor(BMC) support. 
But if you are running any specific scripts or programs from remedy 
workflow and 
you want to handle those errors you can do that from remedy version 7.x and 
above.
They  introduced an error handler event type  where you can specify another 
piece of workflow to fire on error which can be your custom message instead 
of remedy message.


3. No session time out.
There are timeouts specified at the midtier level and at the remedy 
arserver level.
You may have to refer configuration guide for further details.
They are system wide, not user by user basis.
I do not know if remedy removes just my license or it actually times out my 
session but
after the timeout on web if I need to access the consoles or requests it 
forces me to relogin again.


4. Concurrent User Sessions.

You can have concurrent user sessions only if  you are an admin or read 
restrict user.
You can stop giving readrestrict license to users if you do not want them 
to login from several IPs.
All other users are allowed only one active session from one IP address.
If the user tries to login from another server then remedy pops up a 
message.
Also you can write some custome workflow to store the user last login 
details in some remedy form and display on your consoles.

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"

Reply via email to