Review network access at the relevant IBM i interfaces
Powertech Exit Point Manager for IBM i is an access-control enquiry around supported exit-point interfaces. Start with how clients and applications reach the system, including legitimate tools used by administrators and business integrations. A normal sign-on policy should not be assumed to govern every supported network access path in the same way.
Map users, services, client software and required operations. Confirm which exit points and actions the selected product version can govern. Use existing access observations and application-owner knowledge to establish the intended policy before introducing restrictions.
Move from observation to controlled enforcement
Test allowed and denied activity with representative clients and identities. Include automated transfers and scheduled processes where they are part of scope. An unexpected block can interrupt a business interface even when interactive users remain unaffected, so retain a documented rollback and support path.
Handover should identify policy owners, supported boundaries, exceptions and the records used to investigate access. Review exceptions after application changes rather than allowing temporary permissions to become permanent by default. MMC can scope the selected access paths and configuration, while application refactoring and a broader identity redesign should be separately specified.
Evidence to request for this scope
- Confirm the supported exit points and clients relevant to the approved access map.
- Demonstrate permitted access, a deliberate denial and a narrowly approved exception.
- Validate scheduled interfaces and retain recovery instructions before production enforcement.