IBM zVM Using CA VM:Secure Security Technical Implementation Guide

The IBM zVM Using CA VM:Secure Security Technical Implementation Guide (V2 R1) has 77 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

77STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

ArchivedPublished Fri Jul 23 2021

The IBM z/VM TCP/IP ANONYMOU statement must not be coded in FTP configuration.

IBM zVM Using CA VM:Secure Security Technical Implementation Guide

Assessment Title

Rule Text

The IBM z/VM TCP/IP ANONYMOU statement must not be coded in FTP configuration.

Description

Discussion Text

Operating systems utilizing encryption are required to use FIPS-compliant mechanisms for authenticating to cryptographic modules.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-237921

Rule

SV-237921r649603_rule

Severity

medium

Rule Version

IBMZ-VM-000680

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If there is no FTP Server active, this is not applicable.

Examine the "DTCPARMS" file for each active FTP server.

If there is ":ANONYMOUS" or ":ANONYMOU" statement, this is a finding.

Examine the "SRVRFTP" command.

If "ANONYMOU" is coded, this is a finding.

Implementation Procedure

Fix Text

Ensure the ":ANONYMOUS" or ":ANONYMOU" statement is not coded in the "DTCPARMS" or "SRVRFTP" command.

STIG check 25 of 77 in the IBM zVM Using CA VM:Secure STIG checklist

← Previous · V-237920The IBM z/VM TCP/IP VMSSL command operands must be configured properly.Next · V-237922 →CA VM:Secure product ADMIN GLOBALS command must be restricted to systems programming personnel.