STIGQter: STIG Summary: IBM z/OS ACF2 Security Technical Implementation Guide Version: 9 Release: 9 Benchmark Date: 01 Jul 2026:

IBM z/OS SSL options for the TN3270 Telnet Server must specufy a secure port.

DISA Rule

SV-285328r1225885_rule

Vulnerability Number

V-285328

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

ACF2-TN-000025

Severity

CAT I

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the TELNETPARMS block to specify TTLSPORT.

If CONNTYPE is included in the TELNETPARMS block, it specifies SECURE.

Check Contents

Refer to the Profile configuration file specified on the PROFILE DD statement in the TCPIP started task JCL.

If the following items are in effect for the configuration specified in the TCP/IP Profile configuration file, this is not a finding.

Note: If an INCLUDE statement is coded in the TCP/IP Profile configuration file, the data set specified on this statement must be checked for the following items as well.

Each TELNETPARMS block specifies TTLSPORT statement.

If the CONNTYPE statement is present, it specifies SECURE.

Vulnerability Number

V-285328

Documentable

False

Rule Version

ACF2-TN-000025

Severity Override Guidance

Refer to the Profile configuration file specified on the PROFILE DD statement in the TCPIP started task JCL.

If the following items are in effect for the configuration specified in the TCP/IP Profile configuration file, this is not a finding.

Note: If an INCLUDE statement is coded in the TCP/IP Profile configuration file, the data set specified on this statement must be checked for the following items as well.

Each TELNETPARMS block specifies TTLSPORT statement.

If the CONNTYPE statement is present, it specifies SECURE.

Check Content Reference

M

Target Key

4100