db2 for os/390 to db2 for os/390 using TCP/IP. Security?

Richard Pack

db2 for os/390 to db2 for os/390 using TCP/IP. Security?
We are setting up our DB2 for OS/390 regions to communicate using TCP/IP.
We have been using VTAM so far. I am now running into the issue of
security, do I use PassTickets or Userid translations. I don't think I
want to changeh zparm to say TCP/IP is already verified, that would seem to
open up to much and we have alot of traffic from DB2 connect users.
How are others using TCP/IP for this. Are Passtickets mostly used in the
real world of business or is there another method?
TIA.