Securing File Transfer Protocol

You can protect your data by securing FTP with Secure Sockets Layer (SSL), monitoring File Transfer Protocol (FTP) users, and managing user access to FTP functions.

If you use your system as an FTP server on the Internet, it is accessible to the entire world. Therefore, attention to FTP security is necessary to ensure that vital business data stored on your system is not compromised.

• Preventing File Transfer Protocol server access
  You can block the File Transfer Protocol (FTP) port to disable any FTP access to your system. If you do not want anyone to use FTP to access your system, you should prevent the FTP server from running.

• Controlling File Transfer Protocol access
  If you are using File Transfer Protocol (FTP), you need to control users to protect your data and network. This topic offers tips and security considerations.

• Using Secure Sockets Layer to secure the File Transfer Protocol server
  With Secure Sockets Layer (SSL) you can eliminate the exposure of transmitting passwords and data in the clear when using the File Transfer Protocol (FTP) server with an FTP client that also uses SSL.

• Securing FTP clients with Transport Layer Security or Secure Sockets Layer
  You can use Transport Layer Security (TLS) or Secure Sockets Layer (SSL) connections to encrypt data transferred over File Transfer Protocol (FTP) control and data connections.

• Managing access using File Transfer Protocol exit programs
  You can provide additional security by adding FTP exit programs to the File Transfer Protocol (FTP) server and client exit points, so that you can further restrict FTP access to your system.

• Managing access using iSeries Navigator
  You can limit access to File Transfer Protocol (FTP) server or client by using Application Administration in iSeries™ Navigator. Application Administration is component of iSeries Navigator that you can choose to install.

• Monitoring incoming File Transfer Protocol users
  Logging and reviewing File Transfer Protocol (FTP) usage enables you to monitor activity and check for outside attacks.

Parent topic:

Related concepts
Configuring the File Transfer Protocol server