FTP downloads

Question

Hi, Just a quick post regarding FTP downloads on a WS1000.  Does the web appliance scan the download like it does with http downloads? Thanks Jonathan :15267

TomA · Accepted Answer

Hi Jonathan, The short answer is Yes, but there are some exceptions you might want to be aware of. If you are running explicit mode (where browsers have proxy settings configured) we will scan FTP files downloaded via FTP-over-HTTP.  Most FTP clients (and web browsers) are capable of doing FTP-over-HTTP. The WS isn't a native FTP proxy though, so if your FTP client is configured to perform native FTP (usually directly over port 21) then this won't even go through the appliance.  If you're concerned about the security risk of native FTP you could consider blocking this on your firewall. Also, if you are using our appliance via the transparent or bridged modes then FTP traffic won't be scanned unless you explicitly tell the FTP client to use an FTP-over-HTTP proxy. Hope this answers your query, Tom. :15307