Ensure that no unencrypted IP connections use BASICAUTH

高等級 1人工審核cics

說明

11/10/2025 1.1.0 UPDATED RECOMMENDATION: 1.4.1 - Ensure that only authorized users can issue SPI commands - Sections Modified: Remediation Procedure 11/10/2025 1.1.0 UPDATED RECOMMENDATION: 1.4.2 - Ensure that a user requires authorization to start work under a different userid - Sections Modified: Remediation Procedure; Audit Procedure

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Issue the z/OSMF Compliance data collection REST API to drive collection of compliance evidence in the SMF 1154 record. https://{host}:{port}/zosmf/compliance/rest/v1/facts 1. Wait for the data to be collected; this may take up to a minute in some regions. 2. Customize and run the DFH$54P sample JCL to create a summary of all of the CICS TS regions. 3. Look at the ABBREV section of the output. Search for all entries with SMF1154_80_S4_NAME. 4. SMF1154_80_S4_NAME is the name of a TCPIPSERVICE definition. To find the region page back to look at the 1154 ... (full steps: CIS section 3.1.1)

修補方式

修補方法: 操作指南或基礎設施修補檔

Either Configure all TCPIPSERVICE definitions with AUTHENTICATE(BASIC) to have SSL(YES) Or Create policy definitions in AT-TLS so that all TCPIPSERVICE definitions with AUTHENTICATE(BASIC) use TLS Restart CICS

屬性

作業系統: 不限
標籤: cicsnetwork
參考資料: CIS IBM CICS Transaction Server 6.1 Benchmark v1.1.0 - 3.1.1 Ensure that no unencrypted IP connections use BASICAUTH