How To Best Control Access to SFTP Server in DMZ

Doug_Hogue — Fri, 27 Jan 2017 03:36:30 GMT

I have an interesting problem. There is a requirement for moblie devices (Throughout the Us and Canda) to access an SFTP Server from the Internet and upload files to it. No other devices are allowed access, from the Internet, to the SFTP server. The mobile devices will not have stat IPs but dynamic ones. The will of course not be part of our Windos Domain so our Userid Agents will not be able to get the UserId associated with the IP. Since I do not know the IP or UserId of the incoming device I am not sure how to limit, using the Palo Alto, only these devices access to the server. Any ideas or has someone ran across this and already solved it.

I know I could put security on the SFTP server and require sign-in but trying to have multilayers of secuirty if possible.

Thanks, Doug

Re: How To Best Control Access to SFTP Server in DMZ

glastra1 — Fri, 27 Jan 2017 04:24:05 GMT

Use Global Protect 🙂

regards,

Gerardo

Re: How To Best Control Access to SFTP Server in DMZ

reaper — Fri, 27 Jan 2017 09:48:16 GMT

+1 @glastra1

GlobalProtect seems like your only option to securely limit access to this server

topic Re: How To Best Control Access to SFTP Server in DMZ in General Topics

How To Best Control Access to SFTP Server in DMZ

Re: How To Best Control Access to SFTP Server in DMZ

Re: How To Best Control Access to SFTP Server in DMZ