Reflection Security Topics
Technical Note 1700
Last Reviewed 02-May-2013
Applies To
All Reflection Products
Summary
This document lists technical notes that address Reflection products and security.
View Product Support Lifecycle information for Reflection products.
IMPORTANT: The security for all of the Reflection products depends upon the security of the operating system, host, and network environment. Attachmate strongly recommends that you evaluate and implement all relevant security service packs, updates, and patches recommended by your operating system, host, and network manufacturers.
Reflection Security Updates: Feature Updates, Alerts, and Advisories
For information about security updates, see the following technical notes:
1704Security Updates and Reflection for the Web
2502Security Updates and Reflection 2011 or 2008
1708Security Updates and Reflection
2288Security Updates and Reflection for Secure IT
Security and Reflection Products
The following technical notes address Reflection products and security. Technical notes are organized into the following categories:
For Reflection for Secure IT technical notes, see Technical Note 1999.
Security and Reflection 2011
| Number |
Title |
| Review Date |
| 2400 |
Attachmate Products with FIPS 140-2 Validated Crypto Modules |
| 02-May-2013 |
| 2600 |
Java and Attachmate Products |
| 02-May-2013 |
| 2502 |
Security Updates and Reflection 2011 |
| 29-Jan-2013 |
| 2505 |
Security Updates and Reflection X Advantage |
| 29-Jan-2013 |
| 1890 |
Reporting a Potential Security Vulnerability to Attachmate |
| 21-Dec-2012 |
| 2398 |
Attachmate Security Update for CSIRTUK Vulnerability #CPNI-957: Plaintext Recovery Attack Against SSH |
| 10-Jun-2011 |
| 2200 |
Security and Your Operating Environment |
| 19-Nov-2010 |
| 1757 |
Client Certificates and Reflection for IBM |
| 20-Jul-2010 |
| 1839 |
Telnet Port Forwarding and the Reflection Secure Shell Client |
| 20-Jul-2010 |
| 1881 |
Configuring Reflection for Public Key Authentication |
| 20-Jul-2010 |
| 1938 |
Using the GSSAPI Tab in Reflection and Reflection for Secure IT |
| 20-Jul-2010 |
| 2214 |
Connecting to z/OS Using SSL and Reflection for IBM 2011 or 2008 |
| 20-Jul-2010 |
| 2215 |
Connecting to an IBM System i (iSeries) Using SSL and Reflection for IBM 2011 or 2008 |
| 20-Jul-2010 |
Security and Reflection 2008
| Number |
Title |
| Review Date |
| 2400 |
Attachmate Products with FIPS 140-2 Validated Crypto Modules |
| 02-May-2013 |
| 2502 |
Security Updates and Reflection 2011 |
| 29-Jan-2013 |
| 1890 |
Reporting a Potential Security Vulnerability to Attachmate |
| 21-Dec-2012 |
| 2398 |
Attachmate Security Update for CSIRTUK Vulnerability #CPNI-957: Plaintext Recovery Attack Against SSH |
| 10-Jun-2011 |
| 2200 |
Security and Your Operating Environment |
| 19-Nov-2010 |
| 1839 |
Telnet Port Forwarding and the Reflection Secure Shell Client |
| 20-Jul-2010 |
| 1881 |
Configuring Reflection for Public Key Authentication |
| 20-Jul-2010 |
| 1938 |
Using the GSSAPI Tab in Reflection and Reflection for Secure IT |
| 20-Jul-2010 |
| 2137 |
Attachmate Security Updates for US-CERT Vulnerability #845620: RSA Public Exponent 3 |
| 23-Jun-2010 |
| 1385 |
Microsoft VBA Security Update and Reflection Products |
| 18-May-2010 |
Security and Reflection for HP, UNIX, and OpenVMS
| Number |
Title |
| Review Date |
| 2400 |
Attachmate Products with FIPS 140-2 Validated Crypto Modules |
| 02-May-2013 |
| 2600 |
Java and Attachmate Products |
| 02-May-2013 |
| 1708 |
Security Updates and Reflection |
| 29-Jan-2013 |
| 1890 |
Reporting a Potential Security Vulnerability to Attachmate |
| 21-Dec-2012 |
| 2172 |
Securely Transferring Files Using Reflection, EXTRA! or INFOConnect |
| 09-Nov-2012 |
| 2619 |
Certificate Attribute Requirements Enforced by Attachmate Applications |
| 29-Mar-2012 |
| 2398 |
Attachmate Security Update for CSIRTUK Vulnerability #CPNI-957: Plaintext Recovery Attack Against SSH |
| 10-Jun-2011 |
| 2200 |
Security and Your Operating Environment |
| 19-Nov-2010 |
| 1946 |
Securing Windows-Based Reflection Sessions (with SSL/TLS) Using the Reflection Security Proxy |
| 14-Oct-2010 |
| 1839 |
Telnet Port Forwarding and the Reflection Secure Shell Client |
| 20-Jul-2010 |
| 1881 |
Configuring Reflection for Public Key Authentication |
| 20-Jul-2010 |
| 1938 |
Using the GSSAPI Tab in Reflection and Reflection for Secure IT |
| 20-Jul-2010 |
| 2137 |
Attachmate Security Updates for US-CERT Vulnerability #845620: RSA Public Exponent 3 |
| 23-Jun-2010 |
| 1385 |
Microsoft VBA Security Update and Reflection Products |
| 18-May-2010 |
| 1387 |
Third-Party Kerberos Software for Reflection Security Features |
| 02-Apr-2010 |
| 1918 |
The Relationship Between File Transfer, SSH, SCP2 (SCP), and SFTP |
| 02-Apr-2009 |
| 2326 |
Deploying PKI Settings for Reflection Telnet Connections that Use SSL/TLS |
| 25-Apr-2008 |
| 2116 |
SSH and SCP Return Codes |
| 07-Dec-2006 |
| 1857 |
Best Practices for Configuring Reflection Secure Shell |
| 31-May-2006 |
Security and Reflection for IBM
| Number |
Title |
| Review Date |
| 2400 |
Attachmate Products with FIPS 140-2 Validated Crypto Modules |
| 02-May-2013 |
| 2600 |
Java and Attachmate Products |
| 02-May-2013 |
| 1708 |
Security Updates and Reflection |
| 29-Jan-2013 |
| 1890 |
Reporting a Potential Security Vulnerability to Attachmate |
| 21-Dec-2012 |
| 2172 |
Securely Transferring Files Using Reflection, EXTRA! or INFOConnect |
| 09-Nov-2012 |
| 2619 |
Certificate Attribute Requirements Enforced by Attachmate Applications |
| 29-Mar-2012 |
| 2398 |
Attachmate Security Update for CSIRTUK Vulnerability #CPNI-957: Plaintext Recovery Attack Against SSH |
| 10-Jun-2011 |
| 2200 |
Security and Your Operating Environment |
| 19-Nov-2010 |
| 1946 |
Securing Windows-Based Reflection Sessions (with SSL/TLS) Using the Reflection Security Proxy |
| 14-Oct-2010 |
| 1757 |
Client Certificates and Reflection for IBM |
| 20-Jul-2010 |
| 1938 |
Using the GSSAPI Tab in Reflection and Reflection for Secure IT |
| 20-Jul-2010 |
| 2137 |
Attachmate Security Updates for US-CERT Vulnerability #845620: RSA Public Exponent 3 |
| 23-Jun-2010 |
| 1385 |
Microsoft VBA Security Update and Reflection Products |
| 18-May-2010 |
| 1387 |
Third-Party Kerberos Software for Reflection Security Features |
| 02-Apr-2010 |
| 1918 |
The Relationship Between File Transfer, SSH, SCP2 (SCP), and SFTP |
| 02-Apr-2009 |
| 1744 |
Connecting to z/OS Using SSL and Reflection for IBM |
| 06-Jul-2007 |
| 1747 |
Connecting to an iSeries or AS/400 Using SSL and Reflection for IBM |
| 06-Jul-2007 |
| 1865 |
Express Logon Feature (ELF) Support for 3270 Sessions |
| 06-Jul-2007 |
Security and Reflection X
| Number |
Title |
| Review Date |
| 2400 |
Attachmate Products with FIPS 140-2 Validated Crypto Modules |
| 02-May-2013 |
| 2600 |
Java and Attachmate Products |
| 02-May-2013 |
| 1708 |
Security Updates and Reflection |
| 29-Jan-2013 |
| 1890 |
Reporting a Potential Security Vulnerability to Attachmate |
| 21-Dec-2012 |
| 2172 |
Securely Transferring Files Using Reflection, EXTRA! or INFOConnect |
| 09-Nov-2012 |
| 1584 |
Password Caching in Reflection X version 14.x |
| 13-Oct-2011 |
| 1818 |
Starting a UNIX/Linux Desktop Using SSH |
| 18-Aug-2011 |
| 2398 |
Attachmate Security Update for CSIRTUK Vulnerability #CPNI-957: Plaintext Recovery Attack Against SSH |
| 10-Jun-2011 |
| 1814 |
Troubleshooting Reflection X SSH Connections |
| 31-Mar-2011 |
| 2200 |
Security and Your Operating Environment |
| 19-Nov-2010 |
| 1946 |
Securing Windows-Based Reflection Sessions (with SSL/TLS) Using the Reflection Security Proxy |
| 14-Oct-2010 |
| 2302 |
Reflection X, Password Aging, and Secure Shell |
| 14-Oct-2010 |
| 1938 |
Using the GSSAPI Tab in Reflection and Reflection for Secure IT |
| 20-Jul-2010 |
| 2137 |
Attachmate Security Updates for US-CERT Vulnerability #845620: RSA Public Exponent 3 |
| 23-Jun-2010 |
| 1385 |
Microsoft VBA Security Update and Reflection Products |
| 18-May-2010 |
| 1387 |
Third-Party Kerberos Software for Reflection Security Features |
| 02-Apr-2010 |
| 1918 |
The Relationship Between File Transfer, SSH, SCP2 (SCP), and SFTP |
| 02-Apr-2009 |
| 1632 |
Using Reflection X IPIDd to Detect a VPN- or NAT-Assigned IP Address |
| 31-Aug-2007 |
| 2196 |
Securing X11 Connections: An Overview |
| 20-Apr-2007 |
| 1857 |
Best Practices for Configuring Reflection Secure Shell |
| 31-May-2006 |
| 1513 |
Reflection X and Network Address Translation (NAT) |
| 30-Jun-2005 |
| 1580 |
Connecting through a VPN (Virtual Private Network) with Reflection X |
| 30-Jun-2005 |
| 1677 |
Reflection X Security Settings |
| 09-May-2005 |
Security and Reflection for the Web
| Number |
Title |
| Review Date |
| 2400 |
Attachmate Products with FIPS 140-2 Validated Crypto Modules |
| 02-May-2013 |
| 2600 |
Java and Attachmate Products |
| 02-May-2013 |
| 1704 |
Security Updates and Reflection for the Web |
| 29-Jan-2013 |
| 1890 |
Reporting a Potential Security Vulnerability to Attachmate |
| 21-Dec-2012 |
| 2172 |
Securely Transferring Files Using Reflection, EXTRA! or INFOConnect |
| 09-Nov-2012 |
| 1958 |
Reflection for the Web Certificate, Token, and Security Errors |
| 16-Apr-2012 |
| 1702 |
Implementing a CA Signed Certificate for Tomcat |
| 29-Mar-2012 |
| 2619 |
Certificate Attribute Requirements Enforced by Attachmate Applications |
| 29-Mar-2012 |
| 1320 |
Configuring the Security Proxy in a Windows Environment |
| 01-Nov-2011 |
| 1562 |
Reflection Security Proxy Server "Too Many Open Files" Error on Sun Solaris |
| 01-Nov-2011 |
| 1557 |
Reflection Security Proxy Server Performance Factors |
| 13-Oct-2011 |
| 2398 |
Attachmate Security Update for CSIRTUK Vulnerability #CPNI-957: Plaintext Recovery Attack Against SSH |
| 10-Jun-2011 |
| 1504 |
Using Reflection for the Web with Virtual Private Networks (VPNs) |
| 02-Jun-2011 |
| 1556 |
Configuring HTTPS Proxy Settings for a Secure Reflection for the Web Session |
| 02-Jun-2011 |
| 1600 |
Using Certificates with Reflection for the Web |
| 02-Jun-2011 |
| 1647 |
Removing Reflection for the Web Root Certificates |
| 02-Jun-2011 |
| 1670 |
Updating Root Certificate Files in Reflection for the Web |
| 02-Jun-2011 |
| 1760 |
Connecting to z/OS Using SSL and Reflection for the Web |
| 02-Jun-2011 |
| 1761 |
Using Secure Shell in Reflection for the Web |
| 02-Jun-2011 |
| 1766 |
SSL Client Certificates and Reflection for the Web |
| 02-Jun-2011 |
| 1786 |
Connecting Through a Firewall Using Reflection for the Web |
| 02-Jun-2011 |
| 1827 |
Configuring a Secure FTP Session in Reflection for the Web |
| 02-Jun-2011 |
| 1864 |
Using an OpenSSL Certificate with Reflection for the Web |
| 02-Jun-2011 |
| 1878 |
Using Express Logon in Reflection for the Web 2008 |
| 02-Jun-2011 |
| 1883 |
End-to-End Encryption Through the Security Proxy |
| 02-Jun-2011 |
| 1954 |
Kerberos Automatic Sign-On Support for the iSeries |
| 02-Jun-2011 |
| 1956 |
Error Message: "Invalid or missing authorization token" |
| 02-Jun-2011 |
| 2569 |
Setting Up the Reflection for the Web 2011 Security Proxy Server in UNIX and Linux |
| 02-Jun-2011 |
| 2200 |
Security and Your Operating Environment |
| 19-Nov-2010 |
| 1759 |
Connecting to an iSeries or AS/400 Using SSL and Reflection for the Web |
| 14-Oct-2010 |
| 1946 |
Securing Windows-Based Reflection Sessions (with SSL/TLS) Using the Reflection Security Proxy |
| 14-Oct-2010 |
| 2170 |
Using Reflection for the Web with Web Proxies |
| 14-Oct-2010 |
| 1812 |
Setting Up the Reflection for the Web 2008 Security Proxy Server in UNIX, Linux, or Mac OS X |
| 02-Apr-2010 |
Scripting and Security
| Number |
Title |
| Review Date |
| 1385 |
Microsoft VBA Security Update and Reflection Products |
| 18-May-2010 |
| 1918 |
The Relationship Between File Transfer, SSH, SCP2 (SCP), and SFTP |
| 02-Apr-2009 |
Related Technical Notes
| 1704 |
Security Updates and Reflection for the Web |
| 1708 |
Security Updates and Reflection |
| 1999 |
Reflection for Secure IT Technical Notes |
| 2288 |
Security Updates and Reflection for Secure IT |
| 2502 |
Security Updates and Reflection 2011 |