| Locate the SSH daemon configuration file, which may be found in /etc/ssh/ directory. |
From UNIX System Services ISPF Shell navigate to ribbon select tools.
Select option 1 - Work with Processes.
If SSH Daemon is not active, this is not a finding.
Examine SSH daemon configuration file.
If there are no "Ciphers" line or the ciphers list contains any cipher not starting with "3des" or "aes", this is a finding.
If the MACs line is not configured to "hmac-sha1" or greater, this is a finding.
Examine the z/OS-specific sshd server system-wide configuration.
If any of the following is untrue, this is a finding.