[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 716
  • Last Modified:

FTP Setup - Best Practice

I am trying to setup an FTP server that I can use to transfer large videos, pictures & other files over.  I want to be able to have various folders that are assigned to various people with passwords for each one.

Because I know that FTP isn't exactly secure, I am going to have it 100% separate from my AD network, so I want the adding & removing of usernames to be simple!

I am not a very experience Linux person, so I would prefer a simpler setup than that...but, if something is rather simple, I am willing to learn at the cost of fuller functionality or something of the sort.

Please let me know what suggestions you have & what has worked for people in the past.

Another feature I would be interested in would be the ability, through the FTP server, to do a "QoS" sort of scenario in order to prevent having it utilize all of our bandwidth.  (because it is on our DMZ switch, it bypasses everything we have in place for that.

Thanks!
0
rustyrpage
Asked:
rustyrpage
  • 3
  • 3
  • 2
  • +2
1 Solution
 
Jay_Jay70Commented:
Hi rustyrpage,

FTP can be tied into AD and made secure enough
http://www.windowsnetworking.com/articles_tutorials/Creating-Configuring-FTP.html

thats if you want the inbuilt way
0
 
rustyrpageAuthor Commented:
No, I would like to keep it fully-separated from our LAN even.  (putting it on our DMZ with an external IP address)

I am looking at a deal through our vendor for an HP server with Microsoft Small Business 2003 server.  I know that it can run it, but I don't know how the licensing works with it etc.  I also am not sure if that's the best way.

Is there a good Linux solution that has a gui interface & is rather easy to use?  (setting user-level access etc)

Thanks
0
 
Jay_Jay70Commented:
to be honest i have only dealt with IIS FTP so i will leave for more experienced people
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
g127404Commented:
We use Serv-U FTP with the Secure version running on SBS 2003.  It's 99.00 which includes upgrades for 2 years.
Adding users, permissions, folders, etc. is simple.

The secure version uses an SSL certificate which adds a bit of complexity to setting up the client to connect but gives that added security reassurance.
http://www.serv-u.com/versions.asp
0
 
rustyrpageAuthor Commented:
I will look at that, but I am pretty sure that there ought to be a decent freeware version.

Let me know
0
 
arnoldCommented:
Have a look at cygwin as an environment running on windows.  This can be setup to have an ftp server within a "linux/unix" environment.

If you are planning on completely separating the ftp server from your lan, why not go full bore into a Linux system?

Most of the linux systems have a Graphical interface to the file system as well as to configuration Fedora 5, Slackware, Suse, Solaris 10 x86 etc.

I believe HP will preinstall a Linux OS on the server if asked.



0
 
JoesmailCommented:
Best Practice:

Use vsftpd.  This is what most ISP's use as an ftp site.  You will have to look it down to ftp only as a service.  And I wouldn't recommend integrating any external site into your AD unless you have the accounts on a RADIUS, DMZ with IDS, FIREWALL, FIREWALL.

Heres a sample configuration:
http://www.debiansec.com/linux/services/ftp.html
0
 
JoesmailCommented:
Alternatively,

Use a device that has ftp and username/password funcationality built in.  Easy setup.
http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=US%2FLayout&cid=1118334819238&pagename=Linksys%2FCommon%2FVisitorWrapper
0
 
g127404Commented:
ProFTPD is linux based, free and has SSL modules you can add for additional security.
http://www.proftpd.org/features.html

It also has bandwidth control which you mentioned you'd want.
http://www.proftpd.org/localsite/Userguide/linked/x950.html

A list of sites that use it (such as Sourceforge and Linksys)
http://www.proftpd.org/sites.html

I believe it comes with mandrake or you can download it separate.
0
 
rustyrpageAuthor Commented:
Joesmail - I haven't ever seen/heard of that kind of a device before...is that really an enterprise type solution though or would I be kicking myself down the road for doing that?

Everyone else - I am going to look at some of these options & see.  Worst case scenario, can I do all of this with a simple Windows SBS server?
0
 
JoesmailCommented:
Hi Rusty,

Yes they are Enterprise solutions.  They are running a Linux Kernal with the following services setup on them.

- Samba sharing
- Mac sharing
- http sharing
- ftp sharing.
- user account setup
- security and access

The are secure and easy to setup and use.  They have a web interface for management.
This device is perfect for enterprise companies not wanting to have to support the complexities of SECURE Linux solution.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

  • 3
  • 3
  • 2
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now