Tag Archives: SFTP

Enable/Disable FTP, FTPeS, FTPS, SFTP and HTTPS Protocols at will!

Posted on by

FTP Today is proud to announce a powerful new feature — Advanced Protocol Controls.

Site administrators can now decide for yourself which protocols are enabled for file transfer, including FTP, FTPeS, FTPS, SFTP, HTTP and HTTPS. This gives you the power to enforce encryption (for example, by turning off FTP and turning on Explicit FTPS). Also, enabling only the protocols that you currently use provides added security by protecting the server from unwanted connection attempts on open ports.

Please note that we have not changed the way your FTP site functions, but you may still wish to disable some protocols that were formerly enabled simply because they came with your hosting plan.

Next time you log in to your FTP Today site administration system, visit the ‘Site Settings’ section. Use the ‘Change Site Settings’ icon to turn each protocol on or off at the site level. We have a knowledge base article on this topic posted here: http://support.ftptoday.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=92

Secure FTP

Posted on by

The intent of this article is to explain how FTPS, SFTP and HTTPS protocols differ from one another, and the advantages and disadvantages of each method of encryption.

FTPS (FTP using SSL) – Best for Secure and Automated Transfers

Advantages:

  1. Uses 256-bit SSL encryption
    • Username and password are encrypted, as opposed to being sent over the Internet as clear text, as with standard FTP.
    • Data files are sent over an encrypted channel. [Note - This may be user-selectable on stand-alone client software]
    • No one can snoop or sniff out your login information or the contents of your data files on the public Internet.
  2. Third party FTPS client software compatible
    • Many standalone FTPS client software packages can automate and schedule unattended transfers… a BIG ADVANTAGE.
    • Some of your users may already have FTPS client software and prefer it to our web-based method (next).
  3. Users are jailed to their private FTP folders based upon username.
  4. Activity log keeps track of all user activity.

Disadvantages:

  1. Your end users will have to license and install FTP client software ($0 to $50) with FTPS capabilities.
  2. FTPS is not always “firewall-friendly”, therefore you and your clients with firewalls may have to arrange for certain TCP/IP ports to be open to your FTP Today FTP site’s IP address. This is not a major hurdle and our support staff will guide you.

FTP – over – HTTPS (SSL Tunnel) – Best for Secure Web-based Transfers

Advantages:

  1. Uses up to 2048-bit SSL encryption
    • Username and password are encrypted, as opposed to being sent over the Internet as clear text, as with standard FTP.
    • Data files are sent over an encrypted channel. [Note - This may be user-selectable on stand-alone client software]
    • No one can snoop or sniff out your login information or the contents of your data files on the public Internet.
  2. Web browser based
    • Requires no software to be installed by the end user, except a Java Virtual Machine (plugin that is free and everyone usually already has).
    • Loads quickly and seamlessly in their web browser window, and is automatically unloaded when that window is closed.
  3. Users are jailed to their private FTP folders based upon username.
  4. Activity log keeps track of all user activity.
  5. HTTPS is firewall-friendly, therefore you should have no client-side issues to deal with.

Disadvantages: [NONE] Continue reading →