Re: Most secure solution for ftp (IIS?)

From: Kristofer Gafvert [MVP] (kgafvert_at_NEWSilopia.com)
Date: 06/14/05 

Date: Mon, 13 Jun 2005 22:29:13 -0700

As already said, you can use Authentication and then control access using
NTFS.

Another solution is to use WebDav over SSL (so you do not send the
credentials in clear text). 

-- 
Regards,
Kristofer Gafvert (IIS MVP)
www.gafvert.info - My Articles and help
www.ilopia.com
hal@nospam.com wrote:
> So I have a graphics person who wants anonymous ftp for print shops
> and external consultants to upload graphics too big to email.  Ok,
> easy enough, I went out and got Cerberus and put it on our spare DMZ
> server and set up anon access.  A GUI client, a short *** on how to
> set up a profile, log in and drag and drop files.  Should be good to
> go, but that is too hard for the browser dummies and they insist all
> they need do is browse to the site and copy and paste files.  So I
> guess IIS can support this (OK, so I am an IIS dummy) , I put on the
> ftp server, but there doesn't seem to be much with authentication
> control except accept/deny host settings.  Seems horribly insecure to
> me.  What is the easiest and safest way to implement this?  I assume
> all I need to is set default ftp directory to a shared folder my
> internal users can browse (?).  Recommended alternatives appreciated.
>
> thanks
>
> Hal
Quantcast