IBM z/OS FTP.DATA configuration statements for the FTP server must specify the Standard Mandatory DoD Notice and Consent Banner statement.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-223982	TSS0-FT-000100	SV-223982r958586_rule		Medium

Description

STIG	Date
IBM z/OS TSS Security Technical Implementation Guide	2024-12-05

Details

Check Text (C-25655r516345_chk)

Refer to the file specified on the SYSFTPD DD statement in the FTP started task JCL.

If the BANNER statement is not coded or is commented out, this is a finding.

Fix Text (F-25643r516346_fix)

Code the FTPD configuration file to include the BANNER statement that points to the Standard Mandatory DoD Notice and Consent Banner statement.