Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm setting up a Windows Server 2008R2 cloud server on rackspace and ftp will be used by only a few users. Any thoughts on using Filezilla vs IIS 7.5?

share|improve this question
1  
The one you are most familiar with and are best able to configure correctly and securely is the correct one to use. –  RobM Oct 3 '10 at 21:33
    
And in the case I am not familiar with either? –  Tone Oct 4 '10 at 13:22
add comment

2 Answers

up vote 4 down vote accepted

Depending on the server's purpose, I would eschew the native IIS FTP server in favor of a third-party server not tied to the server's authentication system. The major advantage here is that you can sandbox the accounts, and any security vulnerabilities in either the FTP server or Windows file system security are relatively decoupled. Moreover, the third-party FTP process is a little less privileged, since it isn't a core service provided by Microsoft.

A case where this would be the preferred solution would be an IIS web server where one user in each department is in charge of updating the departmental website. A case where it would not be the preferred solution is when every user in the organization has their own web space, in which case the advantages of using the central directory system would probably trump the slight security advantage.

share|improve this answer
add comment

Well, the advantage of using Filezilla is that you have FTPS capability, so that nobody would be able to fish your passwords or content as a man-in-the-middle attack. Also, as an additional option, if you run the "NULL FTP Server" you could run a single port SFTP server on port 22.

share|improve this answer
    
My understanding is that IIS 7.0/7.5 offers this as well? learn.iis.net/page.aspx/304/using-ftp-over-ssl –  Tone Oct 4 '10 at 0:14
    
Yes, but then the poseter would not look smart. Well, now he looks cluless. -1. –  TomTom Oct 4 '10 at 1:45
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.