Re: SFTP versus FTP over SSH2

From: Will (DELETE_westes_at_earthbroadcast.com)
Date: 03/09/05 

Date: Tue, 8 Mar 2005 20:04:28 -0800

We were using SecureFX. Can you explain how it uses FTP over SSH2.
SecureFX specifies that connection option as an alternative to SFTP. 

-- 
Will
"Richard E. Silverman" <res@qoxp.net> wrote in message
news:m2y8cyfibe.fsf@darwin.oankali.net...
> >>>>> "Will" == Will  <DELETE_westes@earthbroadcast.com> writes:
>
>     Will> Can someone please explain what is the difference between SFTP
>     Will> and FTP over SSH2?  Is SFTP less secure?
>
> Actually, you need to explain what you mean by "FTP over SSH2;" you did
> not say what client you're using or how it's operating, and it is more
> likely that SFTP is more secure.  SFTP is a completely distinct
> file-transfer protocol from FTP.  It is specified by a draft of the SSH
> working group and is designed to work over a secure full-duplex
> connection, such as SSH.  FTP, on the other hand, uses multiple TCP
> connections in its operation and is not easily secured by SSH static port
> forwarding.  Unless you're using an SSH client with special FTP support
> (such as Tectia, or SecureFX), it is likely that you were only protecting
> the FTP command channel and not the data transfers.

Relevant Pages

  • Re: SFTP
    ... Some proxy based or firewalls that do application level scanning ... >> SFTP is not FTP. ... >> requests a new channel with the SFTP service. ... >> into the command connection to find the negotiation for the data ...
    (SSH)
  • Re: SFTP versus FTP over SSH2
    ... >Can someone please explain what is the difference between SFTP and FTP ... SFTP is the SSH File Transfer Protocol. ... that they're running over the same sort of SSH connection (SFTP ...
    (comp.security.ssh)
  • RE: Looking for ftp over SSL (TLS) daemon...
    ... > the underlying connection. ... > OpenSSH provides an sftp client and sshd handles the server side of the sftp ... > to build a TLS tunnel and then run an ftp connection through it. ...
    (Focus-SUN)
  • Re: SFTP
    ... Subject: SFTP ... >> I disabled FTP. ... >> they can see my entire directory structure. ... This also happens with SecureFX. ...
    (Focus-Linux)
  • Re: Cannot access an external SFTP site from behind SBS 2003 R2/ISA 2004! HELP!!!
    ... Base on my further research, using SFTP in Explicit mode goes over port 21, ... built in FTP filter as the commands are encrypted. ... Please open the ISA management console, navigate to Firewall Policy, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)