Here is a very good article by Scott Turrull on how to use the registration facility and exit points to secure Client Access requests.
It is Part 2 in a series but it has a link in it to Part 1.
Hope this helps.
(Ron Rurrul…. Not Scott).
It also normally possible just to remove the “Transfert To ISeries icon” from the Iseries Toolbar)
Hope this may help.