SFTP/SSH process meeting requirements

How can I confirm if a batch CL SFTP/SSH process is meeting the below requirements?
V7R1 latest CUM, TL16120

QSH CMD('/QOpenSys/bin/sftp -b /home/eema9117/Rovi_Sub.txt

I have a process in place to confirm all SSL connections, but sure how to confirm SFTP/SSH.



Experian takes security very seriously. In order to comply with the PCI DSS standards Experian will be upgrading its standard security model for all our internet accessible systems. This will be on a rolling program of upgrades which will include UAT/Demo & Production systems.

We are making these upgrades to ensure that Experian services meet the highest standards of security and continue to comply with all current PCI DSS<http://app.go.experian.com/e/er?SP_MID=6874&SP_RID=3511826&s=2448&lid=5037&elqTrackId=397a33ceb6e241be8b6e50c495429ece&elq=af3f5c824a8f447ca1ca0886fdac6486&elqaid=6874&elqat=1> requirements. As an Experian client, the changes will also help you comply with the PCI mandate.

In technical terms Experian will:

* No longer support the use of SSLv3 protocol, which industry experts now regard as being vulnerable. This will be replaced with TLS1.2 or higher, in accordance with PCI DSS 3.1.
* Update our Cypher suite to 256-bit encryption as the primary code as well as having 128-bit available.
* Remove the RC4 Cypher suite, which industry experts no longer consider to be secure.
The URLs or IP addresses you use to contact Experian will not change.

What you need to do
You will need to ensure that the browsers you use to access Experian's services are compatible with TLS1.2 protocol. To support you in this, Experian has updated our https://www.experian.com<https://www.experian.com?SP_MID=6874&SP_RID=3511826&elqTrackId=581d43fcc122483c86868a0c42197cc9&elq=af3f5c824a8f447ca1ca0886fdac6486&elqaid=6874&elqat=1&elqCampaignId=3452> homepage where you are able to test your connectivity. If you are able to successfully view this site your browser is supporting the TLS1.2 protocol.

Important Dates
Experian will be coordinating upgrade dates in the near future; however, we are anticipating to begin the upgrade process in late June 2016. Experian will cease to support the SSLv3, TLS1.0 and TLS1.1 security protocols as a result of this upgrade.


Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx<mailto:psteinmetz@xxxxxxxxxx>
http://www.pencor.com/