Steve, 

I didn't think that it (maybe AR39 - check DISA) was that detail to
logoff with 15 minutes of inactivity.  I though it just stated to lock
the terminals and have the users be revalidated. 

Checking my memory backs for the documents now.  Maybe GAO..
Kevin 

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of David Speake
Sent: Monday, June 18, 2007 12:20 PM
To: [email protected]
Subject: CMS/DOD idle connection requirements

Can anyone point me to the actual government documents (CMS and DOD)
pertaining to the security requirement for unattended (15 minutes)
connections.
There are two interpretations here:
    1) kick the user completely out (CICS TSO)
    2) require the user to enter a (Secure Serve Validated) password to
continue.

The first may be difficult/expensive machine/software wise.
The second is monstrously disruptive to the session user.
Have these issues been addressed with IBM - CICS/TSO?

My VTAM guy tells me idle LU's are also a concern.
My concern is productivity of 4 or 5 hundred TSO users and several
thousand
CICS users.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to