Secure File Transfer

[LCI]

I'm looking to setup a secure means to share specific data with a
partner outside the US. While I could give them access via a VPN, I
don't love them having access to our whole network. I'm thinking of
something like an FTP server sitting in my DMZ for them and us to be
able to upload/download files to. Since FTP is not inherently secure, I
need to start looking at some secure version of it, of which there are
numerous options. Does anybody have any experience with this kind of a
plan or recomendations as to the best secure method of FTP? Non-FTP
solutions are also welcome as I have not committed to FTP yet. TIA.

--Jared

 

[Curtis Clay III [MSFT]]

Hello Jared,
Hopefully this article will give you the information you need.

239120 HOW TO: Create a Secure FTP Directory that Uses Password
Authentication
http://support.microsoft.com/?id=239120

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Steven L Umbach]

You mentioned vpn. With W2K, you can create remote access polices based on
user group membership. If you created a policy for a group you could then
edit the profile and in the ip section create a packet filter that can
control traffic for that session that could limit access to just to a
particular server. As an extra layer of security that group created for vpn
access could be added to the deny access to this computer from the network
user right assignment for other resource servers in your network . ---
Steve

 

[Steven L Umbach]

I need to add that if you go that route, be sure to test policy and order of
policy is very important. Policies need to be listed from specific to
general as the first policy that matches a connection is applied. --- Steve

 

[Karl Levinson [x y] mvp]

VPN is an option. You could use SSH / PuTTY / SCP. You can also
encrypt file transfers a number of ways listed here:

http://securityadmin.info/faq.htm#ftpencryption