supportftp.broadcom.com using port 990 implicit TLS FTP connections

Products

• COMMON SERVICES FOR Z/OS

Issue/Introduction

Does supportftp.broadcom.com support implicit TLS FTP connections using port 990?

What firewall ports need to be opened?

Resolution

We use port 21 for both FTP and FTPS (using explicit TLS). 
See Download Methods and Locations 

You can transfer these files using standard, unsecured FTP (ports 21 and 20) or explicit secured FTP (port 21 and a data channel port in the range 28000 to 28500).

You also need to specify certain parameters in the SYSFTPD for secure FTP. For sample JCL see Sample FTP and SFTP JCL.zip  

You can also connect to supportftp.broadcom.com using port 990. This firewall port needs to be opened.

Port 990 is used for implicit TLS FTP connections, port 21 is for explicit TLS connections. 

To use an implicit TLS connection you also need to add the following statement to the SYSFTPD FTP.DATA file:
SECUREIMPLICITZOS FALSE

Implicit TLS mode also uses ports 28000 to 28500 for the data connection so these firewall ports also need to be opened .

You should also have the following in the SYSFTPD DD to use passive mode:
FWFRIENDLY        TRUE