How To Best Control Access to SFTP Server in DMZ

[Doug_Hogue]

I have an interesting problem. There is a requirement for moblie devices (Throughout the Us and Canda) to access an SFTP Server from the Internet and upload files to it. No other devices are allowed access, from the Internet, to the SFTP server. The mobile devices will not have stat IPs but dynamic ones. The will of course not be part of our Windos Domain so our Userid Agents will not be able to get the UserId associated with the IP. Since I do not know the IP or UserId of the incoming device I am not sure how to limit, using the Palo Alto, only these devices access to the server. Any ideas or has someone ran across this and already solved it.

I know I could put security on the SFTP server and require sign-in but trying to have multilayers of secuirty if possible.

Thanks, Doug 

[glastra1 · Accepted solution]

Use Global Protect 🙂

regards,

Gerardo

[reaper · Accepted solution]

+1 @glastra1

GlobalProtect seems like your only option to securely limit access to this server