[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Securing FTP service
The most important thing for me is secure login/password handling. The login/password is always stored in some cache, and for me thats is to risky. Thats why I looked at one-time password solutions. From what I have heard so far a combination of Safeword from secure computing and SSH2/Secure ftp would be the best solution, since Safeword has a SSH agent. Thanks everybody for helping me... /Jonas -----Original Message----- From: Murphy, Paul [mailto:[email protected]] Sent: den 4 oktober 2000 13:32 To: Jonas Thambert Cc: Fw-1-Mailinglist (E-mail) Subject: RE: [FW1] Securing FTP service Yeah, it is hard to say from your question what the best approach is. You say "secure way [...] to transfer files to a server". What exactly do you want to secure? If you want to assure the identity of the users, then authenticate them, if you want to secure the data, then use encryption. You could do both of these with SecureClient, and maybe use ConnectDirect rather than ftp for more control. Paul. -----Original Message----- From: Dieter Gobbers [mailto:[email protected]] Sent: 04 October 2000 10:26 To: Jonas Thambert Cc: Fw-1-Mailinglist (E-mail) Subject: RE: [FW1] Securing FTP service On 04-Oct-00 Jonas Thambert wrote: > > Hi, > > we need to implement a secure way for > some of our customers (10-15) to transfer files > to a server. The problem is that the customers are on dynamic IPs > so we cant use IP restriction in the FTP. > > I have looked at products like RSA SecureID and > Safeword, but none offers ftp agent. > > Anyone have a good solution to this problem? I would do that using "Client Authentication". That way they have authenticate at the firewall before they can use FTP. Maybe for FTP "User Authentication" will work too but I've never done that. Best regards, Dieter Gobbers UNIX Systems and Network Administrator -- im Auftrag des FAW Ulm (http://www.faw.uni-ulm.de) Ingenieurbuero Dieter Gobbers; Unix- und Netzwerkberatung und -betreuung Kreuzstr. 19, 89160 Dornstadt, Tel.: 07348/928538 email: [email protected], http://www.gobbers.de ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ---------------------------------------------------------------------------- ----- This e-mail is intended only for the above addressee. It may contain privileged information. If you are not the addressee you must not copy, distribute, disclose or use any of the information in it. If you have received it in error please delete it and immediately notify the sender. evolvebank.com is a division of Lloyds TSB Bank plc. Lloyds TSB Bank plc, 71 Lombard Street, London EC3P 3BS. Registered in England, number 2065. Telephone No: 020 7626 1500 Lloyds TSB Scotland plc, Henry Duncan House, 120 George Street, Edinburgh EH2 4LH. Registered in Scotland, number 95237. Telephone No:Lloyds TSB Bank plc and Lloyds TSB Scotland plc are regulated by the Personal Investment Authority and represent only the Scottish Widows and Lloyds TSB Marketing Group for life assurance, pensions and investment business. Members of the UK Banking Ombudsman Scheme and signatories to the UK Banking Code. ---------------------------------------------------------------------------- ------ ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|