Check the security for ports 32207 and 32208
Description
With the removal of IBM® WebSphere® Application Server OEM Edition for z/OS® in z/OSMF V2R1, the specification of HTTP port values is changed. You can use the z/OSMF supplied port settings, or specify new values during the z/OSMF configuration process.
- IZU_HTTP_SSL_PORT, which specifies the port number for SSL encrypted traffic from your z/OSMF configuration. As of z/OSMF V2R1, the default port number is changed from 32208 (the WebSphere default), to 443, which follows the Internet Engineering Task Force (IETF) standard.
- IZU_HTTP_PORT, which was added in z/OSMF V2R1. This variable specifies the port number for non-encrypted traffic, which is 80, by default. Note that if your installation is migrating from an earlier release of z/OSMF, however, you might have specified port number 32207 for this value, which is the WebSphere default.
Table 1 provides more details about this migration action. Use this information to plan your changes to the system.
| Element or feature: | z/OSMF |
|---|---|
| When change was introduced: | z/OS V2R1. |
| Applies to migration from: | z/OS V1R13. |
| Timing: | Before installing z/OS V2R2. |
| Is the migration action required? | Yes, if you want to use the current defaults. |
| Target system hardware requirements: | None. |
| Target system software requirements: | None. |
| Other system (coexistence or fallback) requirements: | None. |
| Restrictions: | None. |
| System impacts: | None. |
| Related IBM Health Checker for z/OS check: | None. |
Steps to take
If your installation is migrating from an earlier release of z/OSMF, you might have used port numbers 32207 and 32208 forz/OSMF web traffic. These earlier values are not persisted when you migrate to z/OS V2R2. Determine whether ports 32207 and 32208 should remain active on your system, and update the settings or close the ports, as required by your installation security policies.
Reference information
For information about configuring z/OSMF, see IBM z/OS Management Facility Configuration Guide.