Re: Is there any problem by running both ftp and Http in the same Machine

From: Andrew Mitchell (amitchell_at_removecasey.vic.gov.au)
Date: 10/27/04 

Date: Wed, 27 Oct 2004 05:15:01 -0700

"Aneesh" <aneesh.r@eostek.com> said

> Thanks Andrew.. One more thing Can usend me the help needed to configure
> the Cetificate Services for FTP.

Certificates open up a whole new area. You need to determine whether you are
going to purchase a certificate from a CA, or set up your own PKI and issue
your own certificates.
Information on Windows 2000 certificate services is available here:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/depopt/20
00cert.mspx

And information on using certificates for IPSec is available here:
http://www.microsoft.com/windows2000/techinfo/planning/security/ipsecsteps.as
p#heading7

It's possible to implement IPSec using a pre-shared key instead of
certificates, which is not as secure as certificates but still a lot better
than plain FTP. The following article explains how to do this for terminal
services:
http://www.winnetmag.com/WindowsSecurity/Article/ArticleID/20288/20288.html
To do this for FTP you would follow the same process, but apply the policy to
port 21 instead of port 3389.

> Also we r planning to move to SFTP

That's a good move but I'd also look at the SQL server account issue as a
matter of priority. 

-- 
Andy.

Relevant Pages

  • Re: What is the difference between ftp encryption types SSL, TLS, SFTP and SSH ?
    ... provided an ftp server offers all these types: ... Server-side certificates are only half of the story. ... This is good for small networks, ...
    (comp.os.linux.security)
  • Re: Is there any problem by running both ftp and Http in the same Machine
    ... Yep - look at the SQL account and other best practices ... specifically how you block SQL code injection attacks. ... and so ftp use is between a couple/few ... > Certificates open up a whole new area. ...
    (microsoft.public.windows.server.security)
  • Re: IIS 6.0 Clustering vs. NLB
    ... Do you know what is IPSec with certificates? ... Do you know that FTP inbond traffic was only allowed to the Sourcfe IP from ... The customer is not always right in my opinion. ... OS/2 Server to Windows 2000. ...
    (microsoft.public.windows.server.clustering)
  • Re: SSL Certificate Signing
    ... but we have had problems ftp'ing certificates to import. ... Here the mainframe network sysprogs do all truly network functions. ... That ftp was adding them, and something did not like them. ... ascii mode. ...
    (bit.listserv.ibm-main)
  • Re: Digital certificates with ftp for unix
    ... > | to install a secure FTP client that supports Secure Sockets Layer ... > I think you want sftp, which is part of the OpenSSH suite. ... You can link SSL certificates with some FTP daemons, ...
    (comp.unix.sco.misc)