IBM Sterling


This portal is to open public enhancement requests for IBM Sterling products and services. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

Clear

Pinned ideas

PINNED Present Multiple Host Keys - RSA and ECDSA
As with standard Linux servers today Secure Proxy should be able to present Host Keys (more than one) in both RSA and ECDSA formats depending on what type the vendor incoming connection supports. Vendors are demanding Host Keys that are stronger t...
Share feedback 20

Sterling Secure Proxy

    Add CU user role feature for HSM integration.

    Using the Crypto User (CU) role improves HSM security by following the least-privilege principle. SSP would use a lower-privileged account for normal cryptographic operations instead of the Crypto Officer role, which can create, modify, and delete...
    7 days ago in Sterling Secure Proxy / Security 0 Submitted

    Post-Quantum Cryptography (PQC) Support in Sterling Secure Proxy

    Quantum computing presents a significant long-term risk to several widely deployed cryptographic algorithms currently used to protect data in transit, including RSA, ECDHE, and DHE, which form the foundation of modern TLS implementations. The imme...
    about 1 month ago in Sterling Secure Proxy / Security 0 Under review

    Forward Proxy to support fetching private key from B2Bi with SEAS

    The existing feature only support to fetch the Private key from LDAP which will be use as identity key when a connection is being initiated to remote user from SSP. This enhancement is to support a mechanism to fetch the user identity key(private ...
    4 months ago in Sterling Secure Proxy / Administration & Configuration 1 Future consideration

    Support for topology constraints

    pod antiaffinity does not help in proper pod distribution. We need topology level constraints also. This ensures that distribution of pods across nodes does not vary beyond a limit.  For example : topologySpreadConstraints:     ...
    20 days ago in Sterling Secure Proxy / Administration & Configuration 0 Submitted

    UI Branding feature for SSPcm Dashboard

    Most customers have their own branding and styling requirements for the different user interfaces they use. At present, there is no support for UI branding customization in SSPcm UI. Nowadays, it is a common customer requirement to customize the U...
    4 months ago in Sterling Secure Proxy / Usability 1 Under review

    Test compatibility windows server 2025 and SSP

    Our organization want to migrate from windows server 2019 to windows server 2025 by 4th quarter of 2026
    10 months ago in Sterling Secure Proxy / Installation & Upgrade 7

    Add support for both TLS 1.2 and TLS1.3 together in same SSL configuration

    Adding support for both TLS 1.2 and TLS 1.3 in the same SSL configuration allows clients to automatically negotiate the highest protocol version they support. This provides a smooth transition to TLS 1.3 while maintaining compatibility with existi...
    3 months ago in Sterling Secure Proxy / Security 1 Under review

    Sterling Secure Proxy Known host key store configuration to support multiple public keys of a client

    In general, Linux/Unix SSH/SFTP clients can support multiple know host keys for the same DNS host and port. When different servers behind a load balancer present different host keys, the client typically stores and validates multiple entries in th...
    about 1 month ago in Sterling Secure Proxy / Administration & Configuration 0 Under review

    Block traffic from an IP address, if rate of connections exceeds a configured value.

    There should be a mechanism/setting in SSP where we can configure the maximum number of concurrent connections allowed from any IP. And if the number of connections exceed the maximum limit, the SSP should block any more connections from that IP a...
    6 months ago in Sterling Secure Proxy / Security 1 Under review

    SSP should have a setting to configure "allowlist" usernames which should accept regex express for allowed user names

    The SSP must provide a setting to configure, such as a **"Users Allowlist"**, where we can set up a list of usernames and/or a regular expression. This configuration should ensure that the SSP allows connections only from those users that match th...
    6 months ago in Sterling Secure Proxy / Administration & Configuration 2 Future consideration

    By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
    Do not place IBM confidential, company confidential, or personal information into any field.