The third party library we use for SFTP/SCP/SSH does not document the RFCs it is compliant with. Since SSH negotiates handshakes I'm not sure how to best determine what is supported. However, given that the RFCs were posted in 2006, there is a strong probability that they are supported.
------------------------------
Broadcom - CA Technologies
------------------------------
Original Message:
Sent: 07-09-2020 09:25 AM
From: Chandrasekaran Venkataraman
Subject: AutoSys SFTP, SCP job type complies with RFCs 4251–4254?
Hi,
We are positioning Autosys native SFTP/SCP job type as replacement for a 3rd party (licensed) SSH/SFTP client. Infosec is asking if the native SFTP/SCP jobs are RFCs 4251–4254 compliant. I tried to lookup available documentation around AutoSys SFTP/SCP jobs and also System Agent documentation but couldn't find anything related, except the following:
https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/intelligent-automation/workload-automation-system-agent/11-4/reference/supported-security-algorithms.html
Has anyone come across similar query from their security team?
Broadcom Product Owner(s): Cloud someone point to me the library used in the System Agent to handle SSH communication for SFTP/SSH/Remote Execution, please? @Daniel Shannon - Your counsel would be greatly appreciated. Thanks much!