Re: secure file transfer FROM z/OS

Thanks Kirk, just the info I needed.

Jim McAlpine

On Tue, Mar 31, 2009 at 4:24 PM, Kirk Wolf <kirk@xxxxxxxxxxxx> wrote:

Jim,

The two primary non-proprietary protocols and IBM products are:

- FTPS (TLS). This is supported by z/OS Communications Server.

- SSH SFTP. This is supported by z/OS Ported Tools - OpenSSH.


FTPS pros -
Full dataset support by z/OS CS
Generally, better native z/OS features than Ported Tools SSH

FTPS cons -
Uses multiple sockets which can be tricky wrt firewalls, NAT routers, etc
Requires compatible FTPS server

SFTP pros -
Single socket connection, much more firewall friendly
SSH/SFTP tends to be more widely available on partner *nix systems than
FTPS

SFTP cons -
Ported Tools version of OpenSSH doesn't support MVS datasets, SMF, etc.

Other options -

- We offer a free extension to Ported Tools OpenSSH that adds MVS dataset
support and SMF logging to SFTP.
- We also offer a free proxy tool that can be used to tunnel regular FTP
over an SSH connection.
- SSH Communications offers their own completely separate SSH/SFP product
("Tectia").

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

PS> Are you interested in more information on z/OS SSH SFTP ? We plan on
offering a free webinar on Ported Tools OpenSSH and SFTP. Please drop me
an
email if you are interested and I'll add you to announcement list when it
is
available.



On Tue, Mar 31, 2009 at 9:24 AM, Jim McAlpine <jim.mcalpine@xxxxxxxxx
wrote:

What protocols are available to enable secure file transfer with z/OS
being
the client. I've RTFM but not found a great deal and the archives are
not
helping me very much.

Jim McAlpine

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
.

Relevant Pages

  • Re: secure file transfer FROM z/OS
    ... FTPS. ... SSH SFTP. ... better native z/OS features than Ported Tools SSH ...
    (bit.listserv.ibm-main)
  • Re: sftp interactive under uss shell?
    ... It may also use many features of ssh, such as public key authentication and compression. ... For those who use sftp on zOS, do you enter this interactive mode using the ... you must access z/OS using an ssh connection. ... you can use the sftp command ...
    (bit.listserv.ibm-main)
  • Re: FTPS Server for OpenVMS (Also posted to the ITRC)
    ... what is an FTPS server? ... Do you mean SFTP (Secure ... SSH, SFTP, etc are available as part of TCP/IP Services for OpenVMS. ...
    (comp.os.vms)
  • Re: Secure FTP
    ... I am unclear whether I can use ftps and AT-TLS or am stuck with sftp. ... Their agency might also support ftps, but you'd have to ask them. ... Alternatively you can install the IBM Ported Tools for z/OS as Richard ... For IBM-MAIN subscribe / signoff / archive access instructions, ...
    (bit.listserv.ibm-main)
  • Re: SFTP
    ... > deals with blocking issues within the SSH tunnel and TCP window issues. ... > requests a new channel with the SFTP service. ... > SSH connection. ... FTPS is the legacy FTP with TLS ...
    (SSH)