IBM z/OS FTP.DATA configuration statements for the FTP server must specify the BANNER statement.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-223737	RACF-FT-000050	SV-223737r958586_rule		Medium

Description

STIG	Date
IBM z/OS RACF Security Technical Implementation Guide	2025-06-24

Details

Check Text (C-25410r514899_chk)

Refer to the Data configuration file specified on the SYSFTPD DD statement in the FTP started task JCL.

If the BANNER statement is coded, this is not a finding.

Fix Text (F-25398r514900_fix)

Configure the FTP configuration to include the BANNER statement.