FTP Windows 2003 Server

Hi Guys,

I have an FTP server configured on a windows 2003 OS.

I read this article on how to secure it:

http://www.windowsecurity.com/articles-tutorials/misc_network_security/Secure_FTP_Server.html 

It advises to disable anonymous, when I uncheck the allow anonymous connection, it gives me a warning that username and password will be sent via plain text and it can be comprised? is this method really secure? how can I get round it?

Regards,
kay
KaySenior Systems AdministratorAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
becraigConnect With a Mentor Commented:
Here is a how to for win 2003 server:
http://support.microsoft.com/kb/323441

Bear in mind however that this is an added complicated setup and based on the need for ftp you might open access to your system you would be better served leaving the way it is now.

You can get a cheap or free sftp server which will be just as practical:
http://www.wftpserver.com/

Also try :
http://sourceforge.net/projects/winscp/
0
 
becraigConnect With a Mentor Commented:
FTP is not a secure protocol, if you want to ensure you have security look into sftp which is not natively supported on win2003 server.

Or you can leverage a VPN solution

see:
https://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/7b4bdad5-9a0a-4bf6-8b00-41084b783e20.mspx?mfr=true
0
 
KaySenior Systems AdministratorAuthor Commented:
thanks becraig,

the article says:

"If you intend to place sensitive data on your FTP site or if secure communication between clients and your FTP server are important, consider using FTP over an encrypted channel such as a Virtual Private Network secured with Point-to-Point Tunneling Protocol or Secure Internet Protocol (IPSec). You should also consider using Web Authoring with WebDAV (WebDAV), which utilizes Secure Sockets Layer (SSL)."

how do I do this?
0
All Courses

From novice to tech pro — start learning today.