STIGhubSTIGhub
STIGsRMF ControlsCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • RMF Controls
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 2 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to IBM zVM Using CA VM:Secure Security Technical Implementation Guide

V-237921

CAT II (Medium)

The IBM z/VM TCP/IP ANONYMOU statement must not be coded in FTP configuration.

Rule ID

SV-237921r858975_rule

STIG

IBM zVM Using CA VM:Secure Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-000804

Discussion

Operating systems utilizing encryption are required to use FIPS-compliant mechanisms for authenticating to cryptographic modules.

Check Content

If there is no FTP Server active, this is not applicable.

Examine the "DTCPARMS" file for each active FTP server.

If there is ":ANONYMOUS" or ":ANONYMOU" statement, this is a finding.

Examine the "SRVRFTP" command.

If "ANONYMOU" is coded, this is a finding.

Fix Text

Ensure the ":ANONYMOUS" or ":ANONYMOU" statement is not coded in the "DTCPARMS" or "SRVRFTP" command.