Small Business Server 2008 FTP

Ergs
Ergs used Ask the Experts™
on
Hi Guys

I know sbs2008 have FTP server, is this the best to use? I have a business client who wants secure FTP connections and transfers to his server.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Every Server OS wether linux/windows/unix have FTP server functionality.
if your business client alredy have SBS installed then he can utilize the same for FTP instead of setting up the new server and Hardware.

Also windows is offcourse much easier for configuration and management.
Top Expert 2013

Commented:
It is considered to be a very bad practice, from a security point of view,  to enable FTP services on a domain controller.
Yes as Robwill said, will require to check on the security part that it is not on the domain controller or any important server.
Acronis in Gartner 2019 MQ for datacenter backup

It is an honor to be featured in Gartner 2019 Magic Quadrant for Datacenter Backup and Recovery Solutions. Gartner’s MQ sets a high standard and earning a place on their grid is a great affirmation that Acronis is delivering on our mission to protect all data, apps, and systems.

it is bad practice to install roles/features besides ADDS on domain controllers, however SBS is an exception with Exchange/Sharepoint and many other tools, so activating FTP doesn't change much (imho), just make sure you properly configure the security settings ;-)
Top Expert 2013

Commented:
I disagree . Why would adding FTP to SBS be less of a risk than an other DC.
Network Engineer
Commented:
There is no such thing as "secure" FTP. The original FTP protocol sends all information in cleartext, including passwords.

There are two FTP like options that include encryption: SFTP and FTPS. SFTP is file transfer over SSH, and FTPS is FTP over TLS (SSL). You can use the free FileZilla server for FTPS.

I don't have ant problems adding services to domain controllers, especially for small businesses where there may be only 1 server. I rememebr when everyone only had a PDC, and it was the file/print/DHCP/DNS/WINS server too, and sometimes we even added IIS.

http://wiki.filezilla-project.org/FTPS_using_Explicit_SSL/TLS_howto_(Server)
Top Expert 2013

Commented:
Persoannly I would prefer to see the FTP server on a separate machine (physical or virtual), even and XP box, and pidealy in the DMZ.

Why is it you need FTP?  If for members of your domain they can more securly access resources with the built-in SBS features such as VPN, RWW, or Sharepoint.

Author

Commented:
They are a media company, have external clients who will need to upload and download files.

I agree that ideally an FTP server (as with web servers) should be in a DMZ on a seperate machine... however please remember we are talking about small businesses, this is why they get SBS to have all services on 1 machine - they don't want or afford a complex environment.

I guess what I really want is to use native tools/services where ever possible to accomplish tasks. I am trusting the SBS FTP server hoping that Microsoft would provide a decent service with their products, that things will work and talk to each other better.

Does the native FTP server use SFTP or FTPS? I have set one up in the past using isolation which has worked well, but this time I want to encrypt all data if possible?
Top Expert 2013
Commented:
SBS uses FTP and all though the service can be enabled, Microsoft documentation discourages doing so and that is wwhy there is no wizard to do so like all other services.
kevinhsiehNetwork Engineer

Commented:
The Microsoft service uses the FTP protocol, which bas been around forever, and passes all information in cleartext. It does not support SFTP or FTPS. If it did, I would have recommend it.
Top Expert 2013

Commented:
Why not just set up an old PC running Filezilla, it requires very little in the way of "Horsepower" and would be much safer than enabling on the SBS.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial