Have you taken the security guys through specifc sections of the Redbook
"Tivoli Enterprise Management Across Firewalls"?    Specifically section
3.5.2 starting around page 58.   In that section is a "Proxy security"
section which they are interested in.   Also the "Uni-directional
communications" should be of a lot of interest to them.   When they talk
about "characteristics of traffic" between the EPP and GWP the directions
of connections is important from a security point of view.   With
uni-directional capability, you can have the secure side "always" setup the
connection to the "less-secure" side.

good luck

Kind regards,
Stephen Hochstetler              shochste AT us.ibm DOT com
International Technical Support Organization at IBM
11400 Burnet Road   Austin, TX  78758
Office - 512-838-6198 (t/l 678)       FAX - 512-838-6931
------------------------------------------------------------
http://www.redbooks.ibm.com



---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com

*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)