Ensure FTP.DATA configuration statements enforce AT- TLS protection

CaoCấp 1Xem xét thủ côngibm-z

Mô tả

During the TLS handshake process, mutually acceptable suite of cryptographic algorithms is selected by the server and client. The algorithms specified in the selected suite are used to cryptographically protect the data that subsequently flows between the two. To apply TLS protection of adequate strength, the FTP daemon must be configured to use AT-TLS protection.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

Request a copy of the FTP server configuration statements in FTP.DATA for any active site FTP server started tasks. Verify that:. The EXTENSIONS statement is coded with the AUTH_TLS value The SECURE_CTRLCONN statement is coded with the PRIVATE value The SECURE_DATACONN statement is coded with the PRIVATE or SAFE value The SECURE_FTP statement is coded with the REQUIRED value The TLSCERTCROSSCHECK statement is omitted or is commented out or is coded with the TRUE value The TLSMECHANISM statement is coded with the ATTLS value The TLSRFCLEVEL statement is ... (full steps: CIS section 6.2.4)

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

The site will need to follow their standard change management process for updating FTP server configuration statements in FTP.DATA with compliant values.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: ibm-znetwork
Tham chiếu: CIS IBM z/OS with RACF Benchmark v1.0.0 - 6.2.4 Ensure FTP.DATA configuration statements enforce AT- TLS protection