FTP Server Security

Question

How can I secure my SFTP server via Sophos XG? A tutorial: 
 1. Limit the file types to upload and download 
 2. Scan files for viruses when they're uploaded 
 Thank you for your help

Michael Dunn · Answer

SFOS has a ftpproxy that if used for LAN -> WAN traffic and scanning. It is limited to just malware scanning, with some configuration in Web > General Settings.

If you are trying to do WAN -> LAN/DMZ and protect your own FTP server I do not think we have any features for that - though maybe there is something within WAF.

Mayur Makvana · Answer

Hello, 
 You can refer to the below KBA to apply FTP scanning: 
 https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/FirewallRules/FirewallRuleAdd/index.html 
 https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Web/WebGeneralSettings/index.html 
 Are you also looking to limit the upload/download with specific file size?

Mayur Makvana · Answer

Hello, 
 We don't have an option to limit specifically FTP Upload/Download size. You can reach out to your account manager to add this as feature request with the product.

FTP Server Security

Top Replies