Welcome to ISAserver.org

Support for SFTP?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> Support for SFTP?

Page: [1]

Message

<< Older Topic Newer Topic >>

Support for SFTP? - 2.Mar.2006 3:32:35 PM

edgehead

Posts: 2
Joined: 4.Nov.2005
Status: offline

Anyone know if SFTP will be supported in 2006? I can't get clients connecting to external SFTP sites in 2004.

Post #: 1

Featured Links*

RE: Support for SFTP? - 12.Mar.2006 9:34:57 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Edgehead,

No.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to edgehead)

Post #: 2

RE: Support for SFTP? - 2.May2006 4:34:33 AM

Posts: 1
Joined: 11.Apr.2006
Status: offline

Hi,

I would like to know why it is not supported. I guess from a security view point or is ther something I'm missing here.

Thanks

Brian - Si

(in reply to tshinder)

Post #: 3

RE: Support for SFTP? - 2.May2006 7:42:43 PM

spouseele

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Brian,

you might check out my article http://www.isaserver.org/articles/How_the_FTP_protocol_Challenges_Firewall_Security.html, particular section '5. What about Secure FTP'.

HTH,
Stefaan

(in reply to Si)

Post #: 4

RE: Support for SFTP? - 2.May2006 10:05:55 PM

RAJP

Posts: 53
Joined: 11.Mar.2006
Status: offline

SFTP as in FTP over SSH, a.k.a. TCP 22?

Ray

(in reply to edgehead)

Post #: 5

RE: Support for SFTP? - 4.May2006 8:27:54 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Ray,

I thought that was SCP?

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to RAJP)

Post #: 6

RE: Support for SFTP? - 6.May2006 2:11:32 AM

RAJP

Posts: 53
Joined: 11.Mar.2006
Status: offline

Maybe SCP is a nickname? http://www.coreftp.com/server/ which is billed as SFTP runs on TCP 22. Don't know...

Ray

(in reply to tshinder)

Post #: 7

RE: Support for SFTP? - 6.May2006 11:05:04 AM

spouseele

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Ray,

according to the CoreFTP website you have the choice between the FTP, SFTP and FTPS as protocol. SFTP seems to be just another name for SCP and uses a single SSH (TCP port 22) connection from the SFTP client to the SFTP server. Therefore, if SFTP is used than a simple access rule allowing the SSH protocol (TCP port 22 outbound) should do the trick. ISA doesn't need to have special skills to support that.

However, if you use the FTPS protocol - that is the FTP protocol protected by an SSL/TLS layer - than you need to follow the advice given in my article, even for ISA 2006. The key point is that the FTP control is encrypted and therefore NAT/PAT devices and firewalls can no longer monitor the negotiation of the data connection and do smart things with that information.

HTH,
Stefaan

(in reply to RAJP)

Post #: 8

RE: Support for SFTP? - 7.May2006 6:26:35 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hey guys,

I can confirm that SCP works fine and its a simiple (single connection) protocol.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to spouseele)

Post #: 9

RE: Support for SFTP? - 10.May2007 10:31:41 AM

joakimeriksson

Posts: 10
Joined: 25.Oct.2006
Status: offline

Hi Tshinder,

SCP outbound via an ISA 2004 is possible?

We seem to have some problems with that, we get connection timed out, the same error when we tried with SFTP.

Please elaborate,

Thanks in advance,

Joakim

(in reply to tshinder)

Post #: 10

RE: Support for SFTP? - 11.May2007 11:05:46 AM