Options Available When Designing Authentication For Ftp

By Author: Jasmine
Total Articles: 286
Comment this article

FTP site authentication is restricted to anonymous and/or basic authentication or FTP user isolation. Anonymous access uses 70-620 practice test computername account by default but can be configured to use any Windows account. Anonymous access is similar to anonymous access for IIS. Users don't need to know the account and password. When basic authentication is used, user credentials are passed across the network in the clear, so it might be beneficial to use IPSec policies to protect these credentials or require VPN access.
A new authentication possibility in IIS 6.0 is the ability to use FTP user isolation. FTP user isolation is a methodology where a specific folder is assigned as the FTP site location and is accessible only by using a specific user account and password. In this scenario, the FTP user isolation mode—either Isolate Users or Isolate Users Using Active Directory—is chosen when the site is created. Figure 13-15 shows the FTP User Isola?tion page of the FTP Site Creation Wizard.
To configure Web servers to isolate Web sites and applications:
...
... 1.List the Web sites and applications hosted on the server.
2.Group Web sites by organization or business unit within the organization.
Divide groups from step 2 into subgroups that require similar rights and permissions.

Isolate Users is configured after the site is created by using the how to get windows vista for free Directory Security page to delete the anonymous account and entering a specific domain or local users account. The account name must match the name of the directory on the file server used to store FTP site data.
Using user isolation has the additional security benefit that a user can see only his FTP directory. To the user, it looks like his FTP folder is the root of FTP Isolate User Using Active Directory authenticates users against a specific container in the Active Directory. This reduces the amount of searching that might be done in the Isolate Users mode. Configuration consists of adding the user account to the Directory Security pages of the FTP site and then modifying the FTPRoot (the file server share) and FTPDir (the home directory FTP site location for the user account) properties of the user object in Active Directory.
Securing IIS is a task composed of securing the server running Windows Server 2003 and applying US-specific security.
Key factors to consider when designing IIS security baselines are US-related ser-vices and extensions, process isolation, Web and NTFS permissions, and authentication.
Authentication via certificate mapping can provide secure access to internal resources such as e-mail and intranet sites. Partner access using certificates provided free Microsoft question papers by partners can also be provided via certificate mapping.