IIS Server Security - Secure IIS FTP

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > January 2004 > Secure IIS FTP





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Secure IIS FTP
Jason Lee

2004-01-24, 1:55 am

Does anyone know of a (preferably free) product that
provides secure ftp ability for IIS FTP? Something similar
to SafeTP <http://safetp.cs.berkeley.edu/>. I would use
SafeTP but the client doesn't work on Windows XP, I'm not
sure about its 2003 Server compatibilty, and there are
publized vulernabilities (for over a year) that haven't
been fixed. I want to use Windows Active Directory
accounts and setup FTP sites using NTFS permissions. I'm
not too hot on the fact that IIS FTP sends passwords in
cleartext. I've setup OpenSSH using cygwin but I couldn't
get the same functionality that the current IIS FTP
provides. Any suggestions?
Bernard

2004-01-24, 1:55 am

Try you luck here -
http://www.ford-hutchinson.com/~fh-1-pfh/ftps-ext.html

--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...



"Jason Lee" <anonymous@discussions.microsoft.com> wrote in message
news:09ba01c3be24$c51e1910$a301280a@phx.gbl...
quote:

> Does anyone know of a (preferably free) product that
> provides secure ftp ability for IIS FTP? Something similar
> to SafeTP <http://safetp.cs.berkeley.edu/>. I would use
> SafeTP but the client doesn't work on Windows XP, I'm not
> sure about its 2003 Server compatibilty, and there are
> publized vulernabilities (for over a year) that haven't
> been fixed. I want to use Windows Active Directory
> accounts and setup FTP sites using NTFS permissions. I'm
> not too hot on the fact that IIS FTP sends passwords in
> cleartext. I've setup OpenSSH using cygwin but I couldn't
> get the same functionality that the current IIS FTP
> provides. Any suggestions?




Jason Lee

2004-01-24, 1:55 am

Thanks, I'll check it out
quote:

>-----Original Message-----
>Try you luck here -
>http://www.ford-hutchinson.com/~fh-1-pfh/ftps-ext.html
>
>--
>Regards,
>Bernard Cheah
>http://support.microsoft.com/
>Please respond to newsgroups only ...
>
>
>
>"Jason Lee" <anonymous@discussions.microsoft.com> wrote


in message
quote:

>news:09ba01c3be24$c51e1910$a301280a@phx.gbl...
similar[QUOTE][color=darkred]
not[QUOTE][color=darkred]
couldn't[QUOTE][color=darkred]
>
>
>.
>


Karl Levinson [x y] mvp

2004-01-24, 1:55 am

From the FAQ:

http://securityadmin.info/faq.asp#ftpencryption


"Jason Lee" <anonymous@discussions.microsoft.com> wrote in message
news:09ba01c3be24$c51e1910$a301280a@phx.gbl...
quote:

> Does anyone know of a (preferably free) product that
> provides secure ftp ability for IIS FTP? Something similar
> to SafeTP <http://safetp.cs.berkeley.edu/>. I would use
> SafeTP but the client doesn't work on Windows XP, I'm not
> sure about its 2003 Server compatibilty, and there are
> publized vulernabilities (for over a year) that haven't
> been fixed. I want to use Windows Active Directory
> accounts and setup FTP sites using NTFS permissions. I'm
> not too hot on the fact that IIS FTP sends passwords in
> cleartext. I've setup OpenSSH using cygwin but I couldn't
> get the same functionality that the current IIS FTP
> provides. Any suggestions?




Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com