Information Classification
SFTP File Download
SFTP - File Download. (ftp.integrity-print.com)
Files can be downloaded from an SFTP site. This offers a number of benefits over traditional FTP sites.
· Our FTP server is located within our DMZ, separate to our main network and firewalled from both the outside world and our main network.
· We use FTP over SSL (FTPS) – a certificate is sent from the server to the client at the start of an FTP session. This certificate is used to encrypt each session.
· We use Active Directory accounts to provide usernames and passwords to customers, rather than accounts stored locally on the FTP server.
· The traditional port 21 is used to initiate a connection and to authenticate the user. In addition a randomly allocated secondary port is used for the actual transfer of data
N.B. The secondary port is negotiated in the range 4900 to 4910 – these ports will need to be open on your firewall to allow files to be transfered
· Separate storage locations are provided for each customer.
· This site can be used only for file download only. Files cannot be uploaded to or deleted from this site. An alternative site is provided for file upload.
· All connections to the FTP server are logged. We log username, date and time and client IP as well as a number of other parameters for every connection.
· We communicate usernames by email, but ask that you call your sales representative to obtain your password verbally.
· An SFTP capable client such as ‘Filezilla’ is required to for connection to this FTP site.
This is available free from: http://filezilla-project.org/download.php
Settings when using Filezilla as a client are:
Host: ftp.integrity-print.com
Server type: FTPES – FTP over explicit TLS/SSL
Logon type: Normal
User: ftpdownload|suppliedusername (note the pipe symbol ‘|’ in the username)
Password: as supplied verbally (randomly generated)
· Files will stay on the download site for 90 days after which time they will be removed from the download site. Files will be retained on our main file server for an agreed period of time.
BTH-IS GUI 015 – SFTP File Download (Version 1)