Groups | Blog | Home
all groups > iis security > july 2004 >

iis security : SFPT With Windows 2000 Server?


Rob Carey
7/19/2004 12:26:37 PM
Good Day Folks,

Could someone tell me what the steps are and what is
required to use SFTP instead of plain FTP in IIS 5.0 on a
Windows 2000 Server? Is it different for Windows Server
2003 as we will be migrating to it in the near future?

We have a new requirement that the site use SFTP for
secure transfer.

Do I need additional software on the server or client
machine?

Is there good reliable secure freeware out there or would
a commercial solution be better?

Anything you could tell me would be great..

Thanks!
anonymous NO[at]SPAM discussions.microsoft.com
7/19/2004 2:38:11 PM
Thanks for the info.

Would SSL Certificates be a better way to go? What is the
recomended method to use for secure data transmission?
Can SSL be used with FTP or is it primarily HTML, and
would that be the way to go?

Thanks Again...

[quoted text, click to view]
Jonathan Maltz [MS-MVP]
7/19/2004 4:18:27 PM
Hi,

"SFTP" is different than FTP, and Windows Servers don't come with SFTP
servers/clients, so you will need both

--
--Jonathan Maltz [Microsoft MVP - Windows Server - IIS, Virtual PC]
http://www.visualwin.com - A Windows Server 2003 visual, step-by-step
tutorial site :-)
http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004? Find out
here
Only reply by newsgroup. I do not do technical support via email. Any
emails I have not authorized are deleted before I see them.


[quoted text, click to view]

Jonathan Maltz [MS-MVP]
7/19/2004 10:49:04 PM
FTPS is FTP with SSL, but I don't think that IIS natively supports it

The suggested way, to the best of my knowledge, is to have a VPN to secure
file transfer, but I'm sure someone else here knows a better way

--
--Jonathan Maltz [Microsoft MVP - Windows Server - IIS, Virtual PC]
http://www.visualwin.com - A Windows Server 2003 visual, step-by-step
tutorial site :-)
http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004? Find out
here
Only reply by newsgroup. I do not do technical support via email. Any
emails I have not authorized are deleted before I see them.


[quoted text, click to view]

Karl Levinson [x y] mvp
7/20/2004 12:04:41 AM
Try www.webdav.org/projects ...as it's the only solution I know of that
doesn't require installing a third party client onto every file transfer
client workstation. SSH / SCP / PuTTY might be another common encrypted
solution that's free, but requires you to obtain a client.



[quoted text, click to view]

AddThis Social Bookmark Button