Secure FTP

I am looking in to setting up a FTP server on a Windows server 2008 box. As of right now my only requirement is that FTP communications must be encrypted. I've spent some time looking around and it seems like there are lots of options here. Has anyone setup the MS secure FTP solution? It appears to use SSL to encrypt the connection as opposed to the SFTP protocol which use SSH. Is one better than the other? Are there any 3rd party solutions I should look in to? Keeping costs low is a priority here.

Find more posts tagged with

SAVE $250 on Your Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View Boot Camps

Comments

NightShade03

You may want to check out:

FTPS (FTP over SSL) vs. SFTP (SSH File Transfer Protocol): what to choose

For a quick comparison of the too. In windows I'd image that FTP with SSL is more common (bc it comes on Win2k

, however SSH on linux comes with SFTP built in so I'd image that's more common there.

aordal

This is a decent 3rd party utility for SFTP.

FTP Server for Windows - WS_FTP Server from Ipswitch File Transfer

jovan88

we run nothing but winSCP

Devilsbane

You could use ipsec to encrypt the traffic.

blargoe

I think SFTP is actually more common. I don't know anyone using the FTPS on Windows 2008. I have it installed on a server and it works, but the decision has been made to support both insecure and secure, so none of our customers actually uses the secure client.

blargoe

Don't forget to install the out of band FTP server update for IIS that is a separate download, don't install the one off the Windows 2008 base install. There were a bunch of fixes to the newer one.

NightShade03

blargoe wrote: »

I have it installed on a server and it works, but the decision has been made to support both insecure and secure, so none of our customers actually uses the secure client.

Hows that for irony...

sidsanders

copssh - OpenSSH for Windows | ITeF!x

free...