BDS for FTP Replacement

FTP is a widely used file transfer method, but developed in a time when security was not a concern, and file transfer was in the realm of government researchers. A large number of complaints about FTP come from the people who find it too hard to use, especially if client software needs to be downloaded and installed. Not only are end users frustrated, but help desk and IT support personnel are also spending too much time managing file transfers. The more serious complaint about FTP is its susceptibility to being hacked or accessed by unauthorized individuals, and not compliant with many federal and state regulatory requirements.

The IT group with responsibility for FTP servers is often asked to set up users, create directories, upload files, and then clean up downloaded files. In addition to managing users, passwords, and permissions, IT personnel must search for records of successful delivery in cryptic log files. Extracting reports from an FTP server that is filtered and legible can be tedious. Overall, managing FTP users, assigning permissions, keeping track of files, folders, directory hierarchy, storage limitations, etc. can be a significant burden to an already overloaded IT staff.

Other FTP considerations:

• FTP passwords are sent in clear text
• Files transferred with FTP are not encrypted
• Managing FTP folder permissions is cumbersome
• Analyzing FTP logs is time consuming
• Unpatched FTP servers are vulnerable to malicious attacks
• FTP does not notify senders when a recipient has downloaded a file
• To the average user, FTP is a challenge to use
• Increased risk of "accidental" access by unauthorized individuals

SFTP

SFTP is not actually a secure version of FTP, although it is often confused with FTP. SFTP is a special mode of the Secure shell (SSH) protocol. Your existing FTP servers cannot be upgraded to SFTP, and any existing processes you have with FTP will not be transferable. SFTP also requires a specialized thick client to use to send and receive files, and is not accessible through a Web browser like BDS. Although SFTP is a secure method to transfer files, it is similar to FTP in its lack of tracking and reporting, user management, and Web-enabled interface, and it requires significantly more technical aptitude and IT assistance for the end users than even simple FTP.