IBM i
TMA-IBM-I-5.2.11
FTP Protocol
HighLevel 1Manual reviewibm-i
Description
Restrict FTP to SSL only to prevent sniffing of clear text passwords. Allowing the use of clear-text passwords permits credentials to be intercepted over the network by sniffers, packet monitoring and communication trace tools which could easily lead to unauthorized access to system resources.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Type command CHGFTPA and press F4. Ensure that the Allow Secure Socket Layer is set to *ONLY.
How it is fixed
Fix method: Guidance or infrastructure patch
To establish the recommended configuration, change FTP to use SSL only: CHGFTPA ALWSSL(*ONLY)
Properties
- Operating systems
- Any
- Tags
- ibm-inetwork
- Reference
- CIS IBM i V7R5M0 Benchmark v2.1.0 - 5.2.11 FTP Protocol