Secure mainframe communications

Seamless transition to secure data transfers

Safeguard your data with the latest encryption algorithms and enable transition from File Transfer Protocol (FTP) to SSH File Transfer Protocol (SFTP). The set up is easy without Job Control Language (JCL) modifications, breaking your existing file transfers or requiring manual changes to scripts.

Eliminate manual steps

Get direct access to MVS datasets. This is convenient since there is no need to stage your files to Hierarchical File System (HFS) – an extra step in the process that increases the risk of manual error and requires expertise.

Stay compliant & ensure business continuity

A great number of regulations require that your critical data transfers are protected, such as PCI-DSS, SOX, HIPAA, FISMA, FIPS.

We want to make sure that you stay compliant and enjoy uninterrupted operations. We provide 24/7 support and professional services for large-scale setups.

Encryption beyond the norm

We have a proven, 25-year-long track record as pioneers and innovators in encryption. SSH is a leading player in post-quantum cryptography (PQC): we develop it together with other leading companies and authorities in Finland.

Monitor access to your mainframes

No amount of encryption will make your mainframes secure if you are not monitoring your access control. With our new Zero Trust features, you can easily manage who gets access to your mainframes with role-based access, grant temporary access, get a full audit trail of mainframe usage, and reduce password-related risks and inconveniences.

Ease of use

• ISPF application for installation and configuration
• Configurable FTP fallback option for controlled and phased deployment
• System-wide and user-specific file transfer profiles
• Listing of MVS data sets as files and folders for easy interactive command line

User and server authentication

• Authentication and access control through SAF calls to RACF, ACF2, and TSS
• User authentication with passwords
• User and server authentication with X.509 certificates
• User and server authentication with public keys
• Logging and auditing using SMF records and Syslogd facilities

Secure File Transfer Protocol (SFTP)

• Transparent, automatic FTP-SFTP conversion
• Transparent FTP tunneling
• Multi-terabyte file size support
• Strong encryption of data
• Strong packet-by-packet file integrity checking
• SFTP and SCP command-line tools for interactive and unattended use
• Transparent, automatic FTP-SFTP conversion
• Transparent FTP tunneling
• Multi-terabyte file size support
• Strong encryption of data
• Strong packet-by-packet file integrity checking
• SFTP and SCP command-line tools for interactive and unattended use

• Secure against the quantum threat, with Quantum-Safe Algorithms

Mainframe security

• Automatic transparent encryption of data-in-transit, including user ID and password
• Hardware acceleration of cryptographic operations
• Support for U.S. NIST FIPS 140-2 Certified hardware acceleration
• Configurable re-keying policies
• Multi-channel support - multiple secure sessions are multiplexed to a single TCP/IP connection
• Compliance with the IETF Secure Shell standards

Remote access

• Secure tunneling for TN3270 connections
• Transparent tunneling for TN3270

Zero Trust access control

• Role-based access control (RBAC) - grant and revoke access for multiple mainframe systems at once
• Support for temporary access
• Full audit trail with SIEM integration support
• No passwords - no stolen or leaked passwords, no password rotation
• Optional browser client for TN3270