Um, I think you are making an assumption. "No security mechanism specified" may mean exactly that, nothing more. That is, the process may go on and pick a 'security mechanism'.
I'd want to look a little deeper. Turning on the traces may be quicker than slogging through the SMF data. For TLS/FTP, your FTPSDATA member controls if your server will accept an unsecure session or not. IIRC there are two different entries, one for the control channel (where credentials are exchanged) and one for the data channel. Most auditors require that both channels be secured, but some firewalls require the control channel be open. I think it is the same for your FTPCDATA member where the client will fail the session if your minimus are not met. -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Lizette Koehler Sent: Tuesday, June 14, 2011 4:50 PM To: IBM-MAIN@bama.ua.edu Subject: Re: How to verify if Secured FTP is being used Basically, we have FTP Process. We implemented SFTP on a different stack, earlier this year. No one went back to see if any of the FTP processes in place need to be secured. So I am just researching if it is possible to report on FTP and whether or not that FTP is secured. In some of the batch job's FTP Logs it shows as unsecured. CZ0462 ftpOpen: no security mechanism is specified So I am just trying to verify how to collect and report on FTP functions and whether or not they are secured. Lizette ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
