We use SSL over
FTP. We set ours up without a certificate purchased from a cert
authority, and just used the default one installed. Users get a
warning the first time that the cert is not verifiable but we don’t really
care – it’s for internal use. We have been using the WS_FTP Pro client
for it.
On the firewall
issue – we have a firewall that blocks most ports. In the FTP server
there is an option in Firewall Settings for a range of ports to use for
secure FTP – we set a range and have the firewall allow the ports in that
range. Our firewall does not do NAT since this is a server at a colo
facility, but I think NAT will work OK. Only the data gets encrypted,
not the TCP headers etc. Otherwise the TCP/IP stack wouldn’t know what
to do with it…
The first time I
set up SSL FTP on WS_FTP Server it did not work at all and I spent a lot of
time on it. I finally uninstalled and reinstalled and it worked
fine. No idea why…
Ed
Edgar E.
Cayce III
Chief
Technology Officer
MedTek
[EMAIL PROTECTED]
818-788-8700
x15 ofc
310-923-2679
cell
818-788-8730
fax
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Mohorn
Sent: Friday, April 23, 2004 2:40
PM
To:
[EMAIL PROTECTED]
Subject: RE: [WS_FTP Forum] Secure
FTP
Well, can you give
me more information on how it works and how to set it up. I have the
book, but it doesn't really give me much case study
examples.
I currently have
mine set for standard FTP.
I would like
clients to login and send files securely.
Do I need to
purchase a certificate for this? If so, are they using SSH or SSL or
what? If both, which is better?
Our Firewall uses
NAT and I assume it's changing the ports in the payload. If the
session is encrypted, it won't be able to change the ports. Do I setup
a range of ports for SFTP or what?
What other clients
other than WSFTP_Pro allow for secure transmission -- assuming I go SSH or
SSL?
Until I can get
this working... I simply have clients sending files using AES WinZip 9
compresision and turned off listing capabilities.
-----Original
Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ed Cayce
Sent: Friday, April 23, 2004 4:34
PM
To:
[EMAIL PROTECTED]
Subject: RE: [WS_FTP Forum] Secure
FTP
I use it… What’s
up?
Edgar E.
Cayce III
Chief
Technology Officer
MedTek
[EMAIL PROTECTED]
818-788-8700
x15 ofc
310-923-2679
cell
818-788-8730
fax
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Mohorn
Sent: Friday, April 23, 2004 2:21
PM
To:
[EMAIL PROTECTED]
Subject: [WS_FTP Forum] Secure
FTP
Is there anyone
out there that uses secure FTP?
