IBM Sterling


This portal is to open public enhancement requests for IBM Sterling products and services. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

Security

Showing 67

Hide UniqueID Token in GET parameter for MyFilegateway

Situation: Using MyFilegateaway the uniqueId token is passed as parameters in the URL in GET/POST Request Methods Example: https://mft-nala-val.roche.com/myfilegateway/MyFGUpload.do?uniqueId=-1ccob8032vnyn This value could be used accessing to Bro...
8 months ago in Sterling B2B Integrator / Security 3 Not under consideration

Upgrade Jasper Reports for the PDF Creation in Myfilegateway

For Myfilegateway version 6.1.X and 6.2.X the current version of Jasper Reports 6.19.0 used to create PDF reports is outdated and affected by several vulnerabilities. Also the metadata of all pdf created by Myfilegateway provided info of the PDF C...
9 months ago in Sterling B2B Integrator / Security 1 Planned for future release

RestAPI support for Token Authentication rather than Basic Authentication

Looking for a future service availability to support Token Authentication, either with RestAPI or new one. As per my conversation with an IBM engineer on another troubleshooting call; support of Token Authentication by RestAPI is planned in future...
over 3 years ago in Sterling B2B Integrator / Security 0 Future consideration

CLA2Server publicCertAlias

Now publicCertAlias value of the Command line adapter2 server (CLA2Server) only support the leaf certificate instead of root/intermediate certificate for client authentication with CLA2Client. So it means that all CLA2Client adapter must be use th...
9 months ago in Sterling B2B Integrator / Security 3 Future consideration

Change in SOA Outbound Security Service to include the Timestamp element in message Signature and Digestive Method Algorithm should be sha256 instead of sha1

SOA Outbound Security changes are requested by NZ Customs and this will add more security to the message that has been transmitted. Changes will be Timestamp should be signed and Digestive Method Algorithm should be sha256. Attached file contains ...
11 months ago in Sterling B2B Integrator / Security 1 Planned for future release

Handle big files efficiently in XML Encryption Service

XML Encryption service is not handling big files efficiently. Service gives null error and just cuts the file with status success if file is too large, which must be some kind of bug
almost 2 years ago in Sterling B2B Integrator / Security 1 Planned for future release

Add verification on security level of signatureMethod/digestMethod

On XML Digital Signature service, you can choose which signature and digest method to use when signing; http://www.w3.org/2001/04/xmldsig-more#rsa-sha256 https://www.w3.org/2001/04/xmldsig-more#rsa-sha1 However, when using the service in verify mo...
almost 2 years ago in Sterling B2B Integrator / Security 1 Future consideration

Custom HTTP Headers Response for B2B Sterling Integrator Applications

Web Application Security is always evolving and new vulnerabilities and hardening futures are being created continously. Many of the vulnerabilities remediation are based of add parameters in the HTTP Response Header. For example: Content-Security...
almost 2 years ago in Sterling B2B Integrator / Security 1 Future consideration

Supporting AUTH TLS for FTPS Port 21

Enable AUTH TLS on FTPS Transfer. Current version of SI 6.1.2 doesn't support AUTH TLS. This was a request from an external vendor to enable AUTH TLS for secured transfer.
almost 2 years ago in Sterling B2B Integrator / Security 1 Not under consideration

Include special characters (e.g. @) in Parameter Name of Obscure Data - Process Data Values service

We are using SI 6.0.3.2 and the Parameter Name does not allow special characters such as "@" being used in the Obscure Data - Process Data Values service. This prevents email addresses being used as Names.
about 3 years ago in Sterling B2B Integrator / Security 1 Future consideration

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.