Secure remote connections by using TCP/IP Network Access control with the RACF SERVAUTH class

Trung bìnhCấp 1Xem xét thủ côngdb2-zos

Mô tả

The z/OS communications server TCP/IP network access control provides the ability to control access to Db2 from a range of IP addresses that are defined as a security zone. The TCP/IP network access control with RACF SERVAUTH class protects access to Db2 by allowing users to connect only from approved part of the network.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

1.Review your TCP/IP profile data set for the NETACCESS statement definition and determine if the security zones are defined correctly. You can use the NETSTAT CONFIG (TSO) or netstat -x f (USS) command to display the current TCP/IP configuration, including the NETACCESS rules. Both of the commands in the example below display the current configuration for the TCP/IP stack named TCPIP2: (TSO) NETSTAT CONFIG TCP TCPIP2 (USS) netstat -f -p tcpip2 2.Issue the RACF RLIST command to display the list of users or groups that have access to the corresponding ... (full steps: CIS section 2.1.5)

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

1. Configure the TCP/IP network access control by using the NETACCESS statement in your TCP/IP profile. 2. Permit users access to the corresponding profile for the TCP network security zone access in the RACF SERVAUTH class based on the rules of your organization.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: db2-zosnetwork
Tham chiếu: CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 2.1.5 Secure remote connections by using TCP/IP Network Access control with the RACF SERVAUTH class