Re: Confirming SSLv2 and SSLv3 usage, disabling

[Tim Bronski <tim.bronski@xxxxxxxxx>]

That looks like your FTP server.

On 3/23/2015 3:53 PM, Steinmetz, Paul wrote:
> I was notified by our corporate  security admin (via Nessus scan) that SSLv2 and SSLv3 were still being used on the I and needed to be disabled.
>
> 20007
> SSL Version 2
> and 3 Protocol
> Detection
> Medium        10.5.2.5                                             TCP                      21                       No             iSeries
>
> I turned on the TRCINT per doc N1020594, left it run for 7 days, found no usage of SSLv2 or SSLv3, only *TLSV1.0
> http://www-01.ibm.com/support/docview.wss?uid=nas8N1020594
> What am I missing here?
> How and where do I confirm if SSLv2 or SSLv3 is still configured?
> How do I disable?
> Thank You
> _____
> Paul Steinmetz
> IBM i Systems Administrator
>
> Pencor Services, Inc.
> 462 Delaware Ave
> Palmerton Pa 18071
>
> 610-826-9117 work
> 610-826-9188 fax
> 610-349-0913 cell
> 610-377-6012 home
>
> psteinmetz@xxxxxxxxxx<mailto:psteinmetz@xxxxxxxxxx>
> http://www.pencor.com/