IBM i PASE SFTP Server Exit Point  

ARP-EXIT is an innovative security software tool for the IBM i that enables organization to monitor, audit and log events that take place in the SFTP server application in your PASE environment by making use of your existing FTP exit point programs.   ARP-EXIT is comprised of a set of programs that redirects SFTP server requests to your exit program by looking at standard LOGON and FTP exit point in the IBM i registry and calling those exit point programs to pass the SFTP requests directly just as you are used to doing with standard FTP.  

ARP-EXIT now allows you to do the following for the PASE IBM i SFTP server:

• Monitor and reject logins by inspecting the User ID and IP Address in an exit program
• Reject or accept each SFTP command in an SFTP session
• Override access through adopting user authority
• Control the current directory for SFTP users
• Comply with security mandates (PCI, HIPAA, etc.)

 ARP-EXIT is a result of a collaborative project with SIFT-IT and ARP-SFTP customers.   Initially this tool will allow you to see who logs and from where and also what they are doing as it relates to SFTP.   If a user registers with the ARPEGGIO exit point they will get a lot more information including when a request completes and the number of bytes transferred.

See for yourself and download a trial of ARP-EXIT.