Server 2003 and SFTP

[MoFunk]

Hello Guru's.... I am looking to secure my server 2003 FTP at work. We have been using it for just minimal stuff but now want to use it for more and we need to make sure it meets HIPAA standards. Can someone recommend a way to secure this FTP server? I assume I will need a third party app. Any help would be great! Thanks.

 

[RemyCanad]

Although this is not what you are looking for, could you use SCP instead of FTP? Just setup SSH access and have the clients use winSCP.

 

[MoFunk]

Originally posted by: RemyCanad
Although this is not what you are looking for, could you use SCP instead of FTP? Just setup SSH access and have the clients use winSCP.

I need this to be an automated process for the end user.
They will be using WSFTP to set up a scheduled upload to this FTP.

 

[RemyCanad]

Originally posted by: MoFunk

Originally posted by: RemyCanad
Although this is not what you are looking for, could you use SCP instead of FTP? Just setup SSH access and have the clients use winSCP.

I need this to be an automated process for the end user.
They will be using WSFTP to set up a scheduled upload to this FTP.

I see. WinSCP can be setup to do a scheduled upload.

What are you using for your FTP server? You should be able to convert it over to SFTP and I am pretty sure WSFTP can connect using SFTP.

 

[MoFunk]

Right now we are using Windows server 2003 and set up FTP with IIS. The site is already using WSFTP so I dont want to throw much at them to change.

 

[RaySun2Be]

Is there a way to setup encryption? We have to upload/download pmi to a local agency, and to satisfy HIPAA, the trasfer had to be encrypted, and we have to log on using a userid/password, no anonymous access.

I'll see what type of access we have to use when I get in to work.

[edit]
We are using SFTP with SSH2 to connect to the agency. Not sure what they did to set it up on their end though.
[/edit]

 

[MoFunk]

Dennis, I am in kindof the same boat. I have 5 or 6 hospitals that I have secure FTP access with, but it is their servers so I have no idea how it is set up. We now have the need for 3-4 other sites to upload to us and what they are doing right now is using pkzip to zip and enrypt the files then upload to our everyday ftp server. I want to make this process easier for everyone by setting up a secure FTP so that they can automate their uploading with whatever FTP program they want and then we can copy the files and whatever with a script without having to unzip them with pkzip.

I have found a few things but nothing is working out at this point for me.

 

[RemyCanad]

http://www.digitalmediaminute.com/artic...87/setting-up-a-sftp-server-on-windows

That should setup an SFTP server for you using opensource items.

 

[RaySun2Be]

if Remy's solution doesn't work, try one of these:

Some have free trials:
http://www.google.com.my/search?hl=en&q=secure+ftp+server&meta

 

[Shuxclams]

I like FileZilla ~ It supports SSL/TLS security and certs.
I also dig the USERS/GROUPS settings.









SHUX