This portal is to open public enhancement requests for IBM Sterling products and services. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).
Shape the future of IBM!
We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:
Search existing ideas
Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updateson them if they matter to you. If you can't find what you are looking for,
Post your ideas
Post an idea.
Get feedback from the IBM team and other customers to refine your idea.
Follow the idea through the IBM Ideas process.
Specific links you will want to bookmark for future use
As with standard Linux servers today Secure Proxy should be able to present Host Keys (more than one) in both RSA and ECDSA formats depending on what type the vendor incoming connection supports. Vendors are demanding Host Keys that are stronger t...
Concept of Certificate Grouping and Referring Group Directly Under Netmaps
In Today's world, when Client Authentication is Enabled in SSP, firstly we need to get the root and intermediate certs and check-in to the SSP and then choose the new certificates in the respective netmaps. The number of netmaps we need to make th...
Functionality to Retain Adapter Status in SSP Application in case of a reboot
In the current version of Sterling Secure Proxy available in the market there is no functionality to retain the Adapter state in case of a reboot. Ideally whenever we restart our SSP Engine Application all the adapters are getting started irrespec...
We want the ability to limit inbound sessions per IP address at the adapter level. We don't want to maintain inbound IP addresses in SSP but we would like SSP to be intelligent enough to realize when an external inbound IP is consuming X number of...
SSLv3 is disabled by default in SSP in the java.security file with the following line of code. We have attempted to add TLS1 to disable TLS1.0 only and we were not successful. Adding TSL1 to the list of algorithms disabled all versions of TLS not ...
Allow CD netmap in SSP multiple hosts/IP addresses under the same s-node name
Allow multiple hosts/IP addresses per CD node on SSP netmap. Currently in SSP v343 product, CD node and its address are 1:1 mapping. We currently have 4 CD server adapters on backend SBI 2 node cluster. These SBI CDSA all share the same CD node na...
Secure Proxy support for Perfect Forward Secrecy (PFS)
We run Pentest's against any external interface which includes Secure Proxy to identify any potential security issues. It was found that Perfect Forward Secrecy (PFS) is not supported. The server's SSL/TLS configuration does not support Perfect Fo...
FTP mailbox is not holding FileName as collected from MGET/GET to be used or reviewed in the mclient mailbox manager display
Files are successfully pulled from an FTP server. The filename is not captured and thus the column/field is blank when displayed and passed to recipient mailboxes.Customer wants to use the filename for routing and declaration of what is inside the...
Be able to dynamically pass parameters into Stored Procedure on Output side with ODBC map
Currently the Gentran:Server for Windows 5.3.1 integration application has limitation. It has no capability to dynamically pass in parameters into stored procedure to be used on output side for Inbound map.
Do not place IBM confidential, company confidential, or personal information into any field.