Hsmithdp |
Here are the steps for securing FTP on Win 2003
To Configure Anonymous or Domain User Access
You can configure the FTP site for anonymous access by using a predefined user name and password or you can configure the site to require a user name and password that corresponds to a valid Windows user account. When you configure the site to require a user name and password, credentials and data is sent across the network in plain text and are not encrypted in any way. Information is susceptible to interception.
If you intend to put sensitive data on your FTP site, or if secure communications is important, consider using FTP over an encrypted channel such as a virtual private network (VPN) that is secured with Point-to-Point Tunneling Protocol (PPTP) or Secure Internet Protocol (IPSec). Or, consider using Web Authoring with Web-based Distributed Authoring and Versioning (WebDAV). WebDAV uses Secure Sockets Layer (SSL).
To configure anonymous or domain user access: 1. Click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
2. In the console tree, expand ServerName, where ServerName is the name of the server, expand FTP Site, right-click your FTP site, and then click Properties.
3. Click the Security Accounts tab, and then do one of the following: • To permit anonymous connections to the FTP site, click to select the Allow anonymous connections check box (if it is not already selected). If you want to use a Windows user account other than the default IUSER_ComputerName, specify the user name and password in the User name and Password boxes.
If you want to permit only anonymous connections, click to select the Allow only anonymous connections check box.
• To configure the FTP site to require a Windows user name and password, click to clear the Allow anonymous connections check box.
4. Click OK.
5. Quit Internet Information Services (IIS) Manager.
Back to the top
To Limit Access to Specific Computers
To limit access to only certain computers or groups of computers: 1. Click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
2. In the console tree, expand ServerName, where ServerName is the name of the server, expand FTP Site, right-click your FTP site, and then click Properties.
3. Click the Directory Security tab.
4. Do one of the following: • To deny access, click Granted Access, and then click Add. In the Deny Access dialog box that appears, specify the option that you want, and then click OK.
The computer or group of computers that you specified is added to the list.
• To grant access, click Denied Access, and then click Add. In the Grant Access dialog box that appears, specify the option that you want, and then click OK.
The computer, group of computers, or domain that you selected is added to the list.
5. Click OK.
6. Quit Internet Information Services (IIS) Manager.
FTP, Secure FTP, JES, Mainframe, Job Entry Subsystem
I have been informed that ETS (mainframe adminstrators) hss dictated that all 
0
