Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

FTP Windows 2003 Server

Posted on 2014-03-31
3
Medium Priority
?
477 Views
Last Modified: 2014-04-02
Hi Guys,

I have an FTP server configured on a windows 2003 OS.

I read this article on how to secure it:

http://www.windowsecurity.com/articles-tutorials/misc_network_security/Secure_FTP_Server.html 

It advises to disable anonymous, when I uncheck the allow anonymous connection, it gives me a warning that username and password will be sent via plain text and it can be comprised? is this method really secure? how can I get round it?

Regards,
kay
0
Comment
Question by:Kay
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 29

Assisted Solution

by:becraig
becraig earned 2000 total points
ID: 39966512
FTP is not a secure protocol, if you want to ensure you have security look into sftp which is not natively supported on win2003 server.

Or you can leverage a VPN solution

see:
https://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/7b4bdad5-9a0a-4bf6-8b00-41084b783e20.mspx?mfr=true
0
 

Author Comment

by:Kay
ID: 39966553
thanks becraig,

the article says:

"If you intend to place sensitive data on your FTP site or if secure communication between clients and your FTP server are important, consider using FTP over an encrypted channel such as a Virtual Private Network secured with Point-to-Point Tunneling Protocol or Secure Internet Protocol (IPSec). You should also consider using Web Authoring with WebDAV (WebDAV), which utilizes Secure Sockets Layer (SSL)."

how do I do this?
0
 
LVL 29

Accepted Solution

by:
becraig earned 2000 total points
ID: 39966569
Here is a how to for win 2003 server:
http://support.microsoft.com/kb/323441

Bear in mind however that this is an added complicated setup and based on the need for ftp you might open access to your system you would be better served leaving the way it is now.

You can get a cheap or free sftp server which will be just as practical:
http://www.wftpserver.com/

Also try :
http://sourceforge.net/projects/winscp/
0

Featured Post

Moving data to the cloud? Find out if you’re ready

Before moving to the cloud, it is important to carefully define your db needs, plan for the migration & understand prod. environment. This wp explains how to define what you need from a cloud provider, plan for the migration & what putting a cloud solution into practice entails.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this post we will be converting StringData saved within a text file into a hash table. This can be further used in a PowerShell script for replacing settings that are dynamic in nature from environment to environment.
Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question