Now the discussion is about VPN and SSL (or SSH) - is it redundant or not.
Well, it depends on VPN implementation details, on security requirements
(shall we allow unencrypted traffic within datacenter or not), etc.
I would pay attention to different aspect: the cost of SSL as add-on to
VPN. The only cost is CPU time of SSL endpoints. In case of TN3270 it
would be laptop and z/Machine CPACF. Both are irrelevant - so we can
assume this is for free.
There is no noticeable overhead in network bandwith - encrypted data do
not swell. Not to mention that bandwith required for 3270 terminal is
marginal when compared to nowadays connections.
In other words - SSL is for free (in terms of resources). There is no
harm to use it, even if it not needed.
My $0.02
--
Radoslaw Skorupka
Lodz, Poland
--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl
Sd Rejonowy dla m. st. Warszawy
XII Wydzia Gospodarczy Krajowego Rejestru Sdowego,
nr rejestru przedsibiorców KRS 0000025237
NIP: 526-021-50-88
Wedug stanu na dzie 01.01.2009 r. kapita zakadowy BRE Banku SA (w caoci
wpacony) wynosi 118.763.528 zotych. W zwizku z realizacj warunkowego
podwyszenia kapitau zakadowego, na podstawie uchway XXI WZ z dnia 16 marca
2008r., oraz uchway XVI NWZ z dnia 27 padziernika 2008r., moe ulec
podwyszeniu do kwoty 123.763.528 z. Akcje w podwyszonym kapitale zakadowym
BRE Banku SA bd w caoci opacone.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
