> For the complete documentation index, see [llms.txt](https://docs.editran.onesait.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.editran.onesait.com/documentacion-editran/px-5.2.1-en/editran-px-module.md). # Editran/PX module Given the high sensitivity involved in directly connecting the machines where corporate applications reside to public Internet networks, the module has been developed **Editran/PX** which adds more security to **Editran** in TCP/IP connections. **Editran/PX** acts as a communications gateway with the corporate Editran systems, allowing them and their application files to remain protected without needing to be directly exposed to public networks.\ This architecture also simplifies the administration of firewall rules and TCP/IP connectivity. ## Main features The use of the Internet as a communication channel between systems introduces a series of specific requirements and needs that must be considered in current environments. Although the Internet offers significant advantages in connecting different endpoints, it also introduces certain risks and uncertainties, especially with regard to communications security. This creates the need to use firewalls and other protection mechanisms that make it possible to control, as far as possible, the security uncertainties inherent in TCP/IP environments. In this context, **Editran/PX** is specifically developed to **Editran** and helps mitigate denial-of-service attacks, bombing and other threats, protecting the Editran host from exposure in the demilitarized zone. Below, some of the features that make Editran/PX an indispensable component in a public TCP/IP network will be described. * **Multi-platform**\ Editran/PX is available for Microsoft Windows and Red Hat operating systems, allowing you to choose the most suitable platform for each need. * **Optimization (Multithreading)**\ One of the main concerns in the design of Editran/PX has been to achieve the highest possible efficiency. For this reason, Editran/PX is built in such a way that it creates a thread of execution for each connected client, allowing one connection to not affect the rest and ensuring maximum efficiency on multiprocessor systems. * **TimeOut**\ There is an independent TimeOut prior to the connection with Editran that will close a client's connection when the client connects but sends no data. In this way, the Editran host is prevented from being attacked through a DoS attempt due to lack of free connections. * **Bombing**\ In addition to having a TimeOut, Editran/PX includes a system that prevents attempts at multiple connections from the same client for the purpose of carrying out a DoS attack. These connections never reach the internal Editran host, thus preventing overload. Furthermore, when an attempt at bombing is detected, the connection from the source is disconnected. * **Security**\ With Editran/PX, Editran systems and their application files remain protected against direct access from public networks. The module acts as a TCP/IP communications gateway with external environments, within an architecture protected by perimeter security elements, thus increasing the solution's security level. * **Editran protocol validation**\ One of the main features of Editran/PX is its ability to recognize the Editran protocol. In this way, it prevents connections that do not comply with said protocol from reaching the internal Editran, performing prior filtering and relieving Editran of this load. * **Route definition filtering by port and/or entity codes**\ The product can be configured so that remote connections are routed to different Editran servers in the internal network, depending on the port and/or the code of the entity connecting. * **Syslog generation**\ Editran/PX has its own log generation system and also uses the system syslog, which allows it to be stored or the same log to be sent to another machine. For more details, see the Syslog notifications section. ## Architecture and requirements The following diagram shows a typical installation scenario of the Editran System with the module **Editran/PX**. ![architecture](https://944169240-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6Bgxolt1oQVu07Im3iZJ%2Fuploads%2Fgit-blob-c4fbf7bb258ab32a1b82fef3d8c2d43f491ab134%2F01_arquitectura.png?alt=media) **Editran/PX Gateway**\ It is installed on Red Hat or Windows platforms connected to a public Internet network and with TCP/IP connectivity with the equipment **Editran** in the corporate network.\ This manual is focused on documenting the installation and use of this module. **Editran equipment**\ They can be installed on any of the approved platforms: z/OS, iSeries, Windows or Red Hat. The version **Editran** minimum compatible with the module **Editran/PX** is 4.1. ## Deployment security The protection of the listening ports of **Editran/PX** must be implemented on the machine where the product is hosted and in the associated network security elements. ## Software download To download the software, access the official product page [Editran](https://www.onesait.com/editran/resources). There you will find links to the product's software packages for the currently supported operating systems. If technical support is required, the request can be channeled through: * Support phone - 91 480 80 80 * Email address - --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.editran.onesait.com/documentacion-editran/px-5.2.1-en/editran-px-module.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.