topic How to restrict FTP and SFTP access using a security policy in General Topics

How to restrict FTP and SFTP access using a security policy

Retired Member — Tue, 27 May 2014 15:20:03 GMT

Hi,

I have some users who need to connect to 5 ftp servers using filezilla (ftp and sftp). I want to restrict ftp and sftp access only to those 5 sites using a security policy.

Your advice is greatly appreciated.

Thank you.

Re: How to restrict FTP and SFTP access using a security policy

HULK — Tue, 27 May 2014 17:25:24 GMT

Hello SilvaS,

You can select Application as FTP, so that it will allow/block FTP traffic for a specific set of people. But, there is no specific App available for SFTP. SSH File Transfer Protocol (also Secure File Transfer Protocol, or SFTP) is a protocol which uses SSH to transfer a file. Hence it should work on TCP port 22.

Thanks

Re: How to restrict FTP and SFTP access using a security policy

HULK — Thu, 29 May 2014 05:58:06 GMT

Add to it,

SFTP is not like FTP over SSH, rather a new protocol designed from the ground. Hence the PAN will identify it as SSH traffic, but if you decrypt the same traffic, it will be identified as an SSH-tunnel.

There is a feature request already submitted to develop a new app for SFTP (rather SSH or SSH-tunnel).

Thanks