Solved

Secure FTP without Using an FTP Client

Posted on 2010-11-18
7
498 Views
Last Modified: 2012-05-10
We are in the healthcare industry and have deal with multiple vendors and clients.  We have been using FTP to transfer files but we have been told that it is no longer secure enough.  We need to install an FTP server in our network that has the following requirements:

1.  Must be secure (FTP is not good enough)
2.  We do not want to require everyone to get an FTP client. We want the end user experience to be as easy and elegant as possible.   For example, one of our vendors has an ftp site that is accessed through https web page.
3.  We do not want a web service (like box.net.)

TIA
0
Comment
Question by:southray
7 Comments
 
LVL 5

Expert Comment

by:darrylka
ID: 34164606
Understanding that you don't want to use an FTP client, that really is the best way to go, and there are a zillion free ones out there.  I would recommend Filezilla.

That said, I've seen a couple articles talking about using SSH (which is what secure FTP normally uses) over Internet Explorer.  Most will say you can't do it, but I saw the article below and it might be worth a try:

http://hints.macworld.com/article.php?story=20020906054428870
0
 
LVL 33

Expert Comment

by:Dave Howe
ID: 34164991
there is no such beast.
you should probably instead investigate using a webbrowser based upload site (using a java applet or, if the files are small, just native php upload) and enforce use of a https certificate on the site to achieve the security you need.
0
 
LVL 2

Expert Comment

by:drhamel69
ID: 34165631
What web server are you running?  You could implement a web based fille upload/download system with an SSL certificate.  I have experience in setting up this one: http://www.element-it.com/asp-net-explorer-browser/online-share/web-file-manager.aspx
0
Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
LVL 2

Assisted Solution

by:drhamel69
drhamel69 earned 166 total points
ID: 34165664
Sorry I hit submit when I meant to hit preview.  If you are using IIS you can use HTTP commander.  http://www.element-it.com/asp-net-explorer-browser/online-share/web-file-manager.aspx

It is pretty easy to setup and has loads of options for group and/or user permissions. It also lets user uploads documents also.  And it works great in combination with an SSL.

Sorry I am not a slaesman for it but I once had a need just like this and this fit the bill perfectly.

David
0
 
LVL 42

Assisted Solution

by:kevinhsieh
kevinhsieh earned 167 total points
ID: 34177806
You should look at the various file transfer solutions from Ipswitch. It's not cheap, but we're talking about enterprise software designed for regulated environments like yours.

http://www.ipswitchft.com/Index.aspx

The web transfer module may be exactly what you are looking for.

http://www.ipswitchft.com/Products/WebTransferModule/Index.aspx?u
0
 
LVL 2

Accepted Solution

by:
rrusch earned 167 total points
ID: 34179189
You could use AjaXplorer as a Web-Filemanager over https. Try the demo at: http://www.ajaxplorer.info
0
 

Author Closing Comment

by:southray
ID: 34418076
Thanks for all the options
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you need a certificate so you can offer SSL encryption.  But which one should you get?  There are so many choices out there! Here is a generic overview of the main types of SSL certificates sold by the majority of commercial Certification Auth…
Microservice architecture adoption brings many advantages, but can add intricacy. Selecting the right orchestration tool is most important for business specific needs.
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question