Web Security

Description:

Basically, there are four different forms of authentication that can be configured for an FTP site:

1. Anonymous: no user credentials required.
2. Basic: Need valid user account, but due to design username and passwords are transmitted in plain text. Recommend one is ‘Basic authentication with SSL’.
3. Client Certificate: Need a client certificate to authenticate.
4. Custom

If any of our application is using FTP with basic authentication, then we might have to change the approach to use Basic authentication with SSL.

Steps to enable/disable FTP basic authentication.

1. Open the IIS manager.
2. In the connections pane, expand the server name, expand the Sites node, and then click the name on the site.
3. On the site’s home page, double-click the FTP Authentication feature.
4. On the FTP Authentication page, select Basic Authentication.
5. In Actions pane, click ‘Enable’ to enable basic authentication or disable to ‘Disable’ basic authentication.