IBM Sterling


This portal is to open public enhancement requests for IBM Sterling products and services. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

My ideas: Security

Showing 61 of 2619

Implicit SSL is making a comeback with some sites due to its immediate application of SSL

Implicit SSL is generally not considered a best practice when setting up FTPS. The preferred alternative is Explicit SSL, which is the current standard for FTPS connections for B2B Integrator. However, some of our customers experience intense busi...
about 3 years ago in Sterling B2B Integrator / Security 0 Future consideration

Capture partner TLS version information during handshake

For all communications protocols (FTPs, SFTP, AS2, ConnectDirect etc), we would like to capture TLS version in logs. In case of upgrades, it helps to work with respective partners to upgrade to supported TLS version.
almost 4 years ago in Sterling B2B Integrator / Security 1 Functionality already exists

We need to a native support of OpenSSL encryption as we have for PGP

Banks needs different ways to enrypt files at rest, and they need native support from the sterling solution instead of using CLI adaprter or other mehods
24 days ago in Sterling B2B Integrator / Security 0 Submitted

Validate content of file uploads on dashboard

Sterling Integrator was flagged on recent PenTest due to the fact that it allows any type of file to be uploaded on dashboard, ie as bp primary document, maps, xslts, etc. Case TS016869403 confirmed that currently only mailboxes can restrict file ...
25 days ago in Sterling B2B Integrator / Security 0 Submitted

Allow IBM SFG to use ECC PGP key

Currently, IBM B2Bi doesnt allow ECC PGP key. Would this be in the roadmap?
2 months ago in Sterling B2B Integrator / Security 0 Submitted

Hide UniqueID Token in GET parameter for MyFilegateway

Situation: Using MyFilegateaway the uniqueId token is passed as parameters in the URL in GET/POST Request Methods Example: https://mft-nala-val.roche.com/myfilegateway/MyFGUpload.do?uniqueId=-1ccob8032vnyn This value could be used accessing to Bro...
6 months ago in Sterling B2B Integrator / Security 2 Needs more information

Upgrade Jasper Reports for the PDF Creation in Myfilegateway

For Myfilegateway version 6.1.X and 6.2.X the current version of Jasper Reports 6.19.0 used to create PDF reports is outdated and affected by several vulnerabilities. Also the metadata of all pdf created by Myfilegateway provided info of the PDF C...
7 months ago in Sterling B2B Integrator / Security 1 Planned for future release

CLA2Server publicCertAlias

Now publicCertAlias value of the Command line adapter2 server (CLA2Server) only support the leaf certificate instead of root/intermediate certificate for client authentication with CLA2Client. So it means that all CLA2Client adapter must be use th...
7 months ago in Sterling B2B Integrator / Security 3 Future consideration

Change in SOA Outbound Security Service to include the Timestamp element in message Signature and Digestive Method Algorithm should be sha256 instead of sha1

SOA Outbound Security changes are requested by NZ Customs and this will add more security to the message that has been transmitted. Changes will be Timestamp should be signed and Digestive Method Algorithm should be sha256. Attached file contains ...
9 months ago in Sterling B2B Integrator / Security 1 Planned for future release

Failed to authenticate with SFTP/FTPs, doesn't display any information of the source

Hi currently, we have a policy to lock an account after 3 failed connections on SFTP or FTPs protocol. In the communication session, it's possible to have the IP source when the authentication is successfull, but when the connection failed, the IP...
11 months ago in Sterling B2B Integrator / Security 5 Functionality already exists

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.