For FTP processing Z/VM TCP/IP FTP server Exit must be enabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-78857	IBMZ-VM-000090	SV-93563r1_rule		Medium

Description
Remote access services, such as those providing remote access to network devices and information systems, which lack automated monitoring capabilities, increase risk and make remote user access management difficult at best. Remote access is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through an external, non-organization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.

Description

Remote access services, such as those providing remote access to network devices and information systems, which lack automated monitoring capabilities, increase risk and make remote user access management difficult at best. Remote access is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through an external, non-organization-controlled network. Remote access methods include, for example, dial-up, broadband, and wireless.

STIG	Date
IBM z/VM Using CA VM:Secure Security Technical Implementation Guide	2017-12-11

Details

Check Text ( C-78443r1_chk )
If there are no FTP servers’ active, this is not applicable. Issue “SMSG” command for each FTP Server. Query “FTAUDIT”. If the “Exit” is not enabled, this is a finding.

Fix Text (F-85607r1_fix)
Include the “FTAUDIT” statement in the TCP/IP Configuration file.