Secure FTP Client

[s***@yahoo.com]

Hi List,

I am looking for a Secure-FTP client for Windows which I can use to connect to a Secure-FTP server which is an AIX machine running Open-SSH

I know there are lots of FREE tools out there, but my company prefers
to pay for a commercial product "for security reasons"

Just wanted to get an idea of the tools that you have already used

Our requirement would be one which is command-line so that we can write
batch files to automate file downloads

I had a look at WS_FTP and CuteFTP but these do not suit our requirements

Thanks to all
Ronish

[Joshua Vince]

Take a look at SecureFX by VanDyke software. www.vandyke.com

It also has a command-line component, SFXCL. If you buy it, buy the
bundle w/ SecureCRT, which is a great terminal emulator app.

Josh

-----Original Message-----
From: ***@yahoo.com [mailto:***@yahoo.com]
Sent: Tuesday, November 09, 2004 1:21 AM
To: security-***@securityfocus.com
Subject: Secure FTP Client





Hi List,



I am looking for a Secure-FTP client for Windows which I can use to
connect to a Secure-FTP server which is an AIX machine running Open-SSH



I know there are lots of FREE tools out there, but my company prefers

to pay for a commercial product "for security reasons"



Just wanted to get an idea of the tools that you have already used



Our requirement would be one which is command-line so that we can write

batch files to automate file downloads



I had a look at WS_FTP and CuteFTP but these do not suit our
requirements



Thanks to all

Ronish

[j***@a1.net]

Hello!

have you ever trieded WinSCP or the commercial Versions of SSH (they also include SCP clients and as far as I can remember they are also sftp capable.
Both are easy to use and at least should provide command line interface. other options would include putty secure copy/ftp software, that is generalle command line capable.

hope I could help you
johannes


-----
"the borg we are, give up your ship,
our phasers strong your shields will rip.
we'll assimilate you,
your technology, too,
and you cannot escape from our grip. "


----- Originalnachricht -----
Von: ***@yahoo.com
Datum: Dienstag, 9. November 2004, 7:20
Betreff: Secure FTP Client

Post by s***@yahoo.com
Hi List,
I am looking for a Secure-FTP client for Windows which I can use
to connect to a Secure-FTP server which is an AIX machine running
Open-SSH
I know there are lots of FREE tools out there, but my company
prefers
to pay for a commercial product "for security reasons"
Just wanted to get an idea of the tools that you have already used
Our requirement would be one which is command-line so that we can
write
batch files to automate file downloads
I had a look at WS_FTP and CuteFTP but these do not suit our
requirements
Thanks to all
Ronish

[Alexandre Skyrme]

Greetings Ronish,

VanDyke Software has a commercial secure file transfer program. It's called
SecureFX, you can find more information about it at
http://www.vandyke.com/products/securefx/. As far as I know it does have a
command line interface as well as a GUI.

Regards,
--
Alexandre Skyrme
Cipher - Segurança da Informação
[phone]
www.ciphersec.com.br

Esta mensagem eletrônica pode conter informações privilegiadas e/ou
confidenciais, portanto fica o seu receptor notificado de que qualquer
disseminação, distribuição ou cópia não autorizada é estritamente proibida.
Se você recebeu esta mensagem indevidamente ou por engano, por favor,
informe este fato ao remetente e a apague de seu computador imediatamente.

This e-mail message may contain legally privileged and/or confidential
information, therefore, the recipient is hereby notified that any
unauthorized dissemination, distribution or copying is strictly prohibited.
If you have received this e-mail message inappropriately or accidentally,
please notify the sender and delete it from your computer immediately.



-----Original Message-----
From: ***@yahoo.com [mailto:***@yahoo.com]
Sent: terça-feira, 9 de novembro de 2004 04:21
To: security-***@securityfocus.com
Subject: Secure FTP Client





Hi List,

I am looking for a Secure-FTP client for Windows which I can use to connect
to a Secure-FTP server which is an AIX machine running Open-SSH

I know there are lots of FREE tools out there, but my company prefers
to pay for a commercial product "for security reasons"

Just wanted to get an idea of the tools that you have already used

Our requirement would be one which is command-line so that we can write
batch files to automate file downloads

I had a look at WS_FTP and CuteFTP but these do not suit our requirements

Thanks to all
Ronish

[Doug Massey]

I like VanDyke Software's Secure FX.









---- Original message ----

Date: 9 Nov 2004 06:20:54 -0000
Subject: Secure FTP Client
Hi List,
I am looking for a Secure-FTP client for Windows which I

can use to connect to a Secure-FTP server which is an AIX
machine running Open-SSH

I know there are lots of FREE tools out there, but my

company prefers

to pay for a commercial product "for security reasons"
Just wanted to get an idea of the tools that you have

already used

Our requirement would be one which is command-line so that

we can write

batch files to automate file downloads
I had a look at WS_FTP and CuteFTP but these do not suit

our requirements

Thanks to all
Ronish

Doug Massey
Senior Systems Engineer
MCSA, MCSE, CISSP
Massey Technologies, Inc.
301-717-6404

[Manuel Orellana]

Look
www.ssh.com

They have comercial and non comercial ssh clients

Regards

Manuel


On Wed, 10 Nov 2004 07:20:52 -0500, Doug Massey

Post by Doug Massey
I like VanDyke Software's Secure FX.
---- Original message ----

Date: 9 Nov 2004 06:20:54 -0000
Subject: Secure FTP Client
Hi List,
I am looking for a Secure-FTP client for Windows which I

can use to connect to a Secure-FTP server which is an AIX
machine running Open-SSH

I know there are lots of FREE tools out there, but my

company prefers

to pay for a commercial product "for security reasons"
Just wanted to get an idea of the tools that you have

already used

Our requirement would be one which is command-line so that

we can write

batch files to automate file downloads
I had a look at WS_FTP and CuteFTP but these do not suit

our requirements

Thanks to all
Ronish

Doug Massey
Senior Systems Engineer
MCSA, MCSE, CISSP
Massey Technologies, Inc.
301-717-6404

[Rivera Alonso, David]

We had the same doubt time ago.

Now we have our commercial SW, a great choice:
SecureFX from VanDyke (www.vandyke.com)

As GNU, we also use a great tool, which, together with a public/private key
generation utility like
Puttygen (http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html),
serves perfectly for the sFTP purpose:
WinSCP (http://winscp.sourceforge.net/eng/).

These 2 are our favourites, but I'd love to hear more opinions :-)

best regards from Spain,

DAVID

-----Mensaje original-----
De: ***@yahoo.com [mailto:***@yahoo.com]
Enviado el: martes, 09 de noviembre de 2004 7:21
Para: security-***@securityfocus.com
Asunto: Secure FTP Client





Hi List,

I am looking for a Secure-FTP client for Windows which I can use to connect
to a Secure-FTP server which is an AIX machine running Open-SSH

I know there are lots of FREE tools out there, but my company prefers
to pay for a commercial product "for security reasons"

Just wanted to get an idea of the tools that you have already used

Our requirement would be one which is command-line so that we can write
batch files to automate file downloads

I had a look at WS_FTP and CuteFTP but these do not suit our requirements

Thanks to all
Ronish




=============================
Este mensaje se dirige exclusivamente a su destinatario.
Puede contener informacion confidencial sometida a secreto profesional o cuya divulgacion
este prohibida, en virtud de la legislacion vigente. No esta permitida su divulgacion,
copia o distribucion a terceros sin la autorizacion previa y por escrito de Iberdrola.
Si ha recibido este mensaje por error, le rogamos nos lo comunique inmediatamente
por esta misma via y proceda a su destruccion.

This e-mail is intended exclusively for the individual or entity to which it is addressed
and may contain confidential or legally privileged information, which may not be disclosed
under current legislation. Any form of disclosure, copying or distribution of this e-mail
is strictly prohibited, save with written authorisation from Iberdrola.
If you have received this message in error, please notify the sender immediately by e-mail
and delete all copies of the message.
=============================

[Rivera Alonso, David]

I forgot to say that SecureFX has it's command line utilities, too (you
configure SSH2 key pairs and sFTP sessions via windows GUI, and later you
can invoke them via command line, so, you can place them in batch files).

-----Mensaje original-----
De: Rivera Alonso, David
Enviado el: miércoles, 10 de noviembre de 2004 15:40
Para: '***@yahoo.com'; security-***@securityfocus.com
Asunto: RE: Secure FTP Client


We had the same doubt time ago.

Now we have our commercial SW, a great choice:
SecureFX from VanDyke (www.vandyke.com)

As GNU, we also use a great tool, which, together with a public/private key
generation utility like
Puttygen (http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html),
serves perfectly for the sFTP purpose:
WinSCP (http://winscp.sourceforge.net/eng/).

These 2 are our favourites, but I'd love to hear more opinions :-)

best regards from Spain,

DAVID

-----Mensaje original-----
De: ***@yahoo.com [mailto:***@yahoo.com]
Enviado el: martes, 09 de noviembre de 2004 7:21
Para: security-***@securityfocus.com
Asunto: Secure FTP Client





Hi List,

I am looking for a Secure-FTP client for Windows which I can use to connect
to a Secure-FTP server which is an AIX machine running Open-SSH

I know there are lots of FREE tools out there, but my company prefers
to pay for a commercial product "for security reasons"

Just wanted to get an idea of the tools that you have already used

Our requirement would be one which is command-line so that we can write
batch files to automate file downloads

I had a look at WS_FTP and CuteFTP but these do not suit our requirements

Thanks to all
Ronish




=============================
Este mensaje se dirige exclusivamente a su destinatario.
Puede contener informacion confidencial sometida a secreto profesional o cuya divulgacion
este prohibida, en virtud de la legislacion vigente. No esta permitida su divulgacion,
copia o distribucion a terceros sin la autorizacion previa y por escrito de Iberdrola.
Si ha recibido este mensaje por error, le rogamos nos lo comunique inmediatamente
por esta misma via y proceda a su destruccion.

This e-mail is intended exclusively for the individual or entity to which it is addressed
and may contain confidential or legally privileged information, which may not be disclosed
under current legislation. Any form of disclosure, copying or distribution of this e-mail
is strictly prohibited, save with written authorisation from Iberdrola.
If you have received this message in error, please notify the sender immediately by e-mail
and delete all copies of the message.
=============================

[Jeff Gercken]

If you desire to use scp/sftp transfers in an unattended batch script
you may run into a snag that I had. (and just resolved yesterday). An
important part of the SSH protocol is two way authentication. The
server is authenticated by providing its public key and most software
asks you to confirm it by displaying its fingerprint. After the first
session that key is cached and you're never asked again (unless the
server key changes)

My problem was that I wanted to use scp to transfer files from a target
during an evaluation. I love putty and wanted to use pscp but putty
caches the server fingerprint in the registry and there is no way to
bypass the check or feed it the fingerprint in any other way. Their
solution is to insert keys into the registry but I have no business
doing that on a client's server.

The solution came with scp.com's client that caches everything into a
file and a switch is available to point to an alternate file location.
So in the batch script's working directory I provide scp2.exe a
certificate and the server's fingerprint. Finally I have unattended,
scripted scp/sftp transfers from win32!

Hope this helps someone.
-Jeff

----- Originalnachricht -----
Von: ***@yahoo.com
Datum: Dienstag, 9. November 2004, 7:20
Betreff: Secure FTP Client

Post by s***@yahoo.com
Hi List,
I am looking for a Secure-FTP client for Windows which I can use
to connect to a Secure-FTP server which is an AIX machine running
Open-SSH
I know there are lots of FREE tools out there, but my company
prefers
to pay for a commercial product "for security reasons"
Just wanted to get an idea of the tools that you have already used
Our requirement would be one which is command-line so that we can
write
batch files to automate file downloads
I had a look at WS_FTP and CuteFTP but these do not suit our
requirements
Thanks to all
Ronish

[Roger A. Grimes]

Having faced similar requirements over the years...and having fought to
find the "best" secure FTP standard...and never finding anything but
client compatibility problems...I turned to HTTPS...and my life became
bliss again. Just build a few web pages to accept file uploading and
downloading and let the web's most agreed upon standard do the rest.

Roger

************************************************************************
***
*Roger A. Grimes, Banneret Computer Security, Computer Security
Consultant
*CPA, CISSP, MCSE: Security (NT/2000/2003/MVP), CNE (3/4), A+
*email: ***@banneretcs.com
*cell: 757-615-3355
*Author of Malicious Mobile Code: Virus Protection for Windows by
O'Reilly
*http://www.oreilly.com/catalog/malmobcode
*Author of upcoming Honeypots for Windows (Apress)
************************************************************************
****



-----Original Message-----
From: ***@yahoo.com [mailto:***@yahoo.com]
Sent: Tuesday, November 09, 2004 1:21 AM
To: security-***@securityfocus.com
Subject: Secure FTP Client




Hi List,

I am looking for a Secure-FTP client for Windows which I can use to
connect to a Secure-FTP server which is an AIX machine running Open-SSH

I know there are lots of FREE tools out there, but my company prefers to
pay for a commercial product "for security reasons"

Just wanted to get an idea of the tools that you have already used

Our requirement would be one which is command-line so that we can write
batch files to automate file downloads

I had a look at WS_FTP and CuteFTP but these do not suit our
requirements

Thanks to all
Ronish

[Edwin Rene]

You might want to look at FlashFXP at www/flashfxp/com

Regards
Ed
----- Original Message -----
From: <***@yahoo.com>
To: <security-***@securityfocus.com>
Sent: Tuesday, November 09, 2004 1:20 PM
Subject: Secure FTP Client

Post by s***@yahoo.com
Hi List,
I am looking for a Secure-FTP client for Windows which I can use to
connect to a Secure-FTP server which is an AIX machine running Open-SSH
I know there are lots of FREE tools out there, but my company prefers
to pay for a commercial product "for security reasons"
Just wanted to get an idea of the tools that you have already used
Our requirement would be one which is command-line so that we can write
batch files to automate file downloads
I had a look at WS_FTP and CuteFTP but these do not suit our requirements
Thanks to all
Ronish

[Joel Merrick]

If it's running SSH, why not SCP?

It amazes me how some management believes commercial products MUST be
better because you have to pay for them.

Post by Edwin Rene
You might want to look at FlashFXP at www/flashfxp/com
Regards
Ed
----- Original Message -----
Sent: Tuesday, November 09, 2004 1:20 PM
Subject: Secure FTP Client

Post by s***@yahoo.com
Hi List,
I am looking for a Secure-FTP client for Windows which I can use to
connect to a Secure-FTP server which is an AIX machine running Open-SSH
I know there are lots of FREE tools out there, but my company prefers
to pay for a commercial product "for security reasons"
Just wanted to get an idea of the tools that you have already used
Our requirement would be one which is command-line so that we can write
batch files to automate file downloads
I had a look at WS_FTP and CuteFTP but these do not suit our requirements
Thanks to all
Ronish

[Micheal Espinola Jr]

In my experience: For large amounts of data, I have found SCP to be
the slowest transfer method.

Post by Joel Merrick
If it's running SSH, why not SCP?
It amazes me how some management believes commercial products MUST be
better because you have to pay for them.

Post by Edwin Rene
You might want to look at FlashFXP at www/flashfxp/com
Regards
Ed
----- Original Message -----
Sent: Tuesday, November 09, 2004 1:20 PM
Subject: Secure FTP Client

Post by s***@yahoo.com
Hi List,
I am looking for a Secure-FTP client for Windows which I can use to
connect to a Secure-FTP server which is an AIX machine running Open-SSH
I know there are lots of FREE tools out there, but my company prefers
to pay for a commercial product "for security reasons"
Just wanted to get an idea of the tools that you have already used
Our requirement would be one which is command-line so that we can write
batch files to automate file downloads
I had a look at WS_FTP and CuteFTP but these do not suit our requirements
Thanks to all
Ronish

--
Joel Merrick
GPG Public Key - https://www.servicestyle.com/joel_servicestyle.asc

[Joel Merrick]

Post by Micheal Espinola Jr
In my experience: For large amounts of data, I have found SCP to be
the slowest transfer method.

I suppose it depends on what cipher you use.. I've just found that it's
far more portable than SFTP with a greater number of servers running SSH
than SFTP/WEBDAV

Post by Micheal Espinola Jr

Post by Joel Merrick
If it's running SSH, why not SCP?
It amazes me how some management believes commercial products MUST be
better because you have to pay for them.

Post by Edwin Rene
You might want to look at FlashFXP at www/flashfxp/com
Regards
Ed
----- Original Message -----
Sent: Tuesday, November 09, 2004 1:20 PM
Subject: Secure FTP Client

Post by s***@yahoo.com
Hi List,
I am looking for a Secure-FTP client for Windows which I can use to
connect to a Secure-FTP server which is an AIX machine running Open-SSH
I know there are lots of FREE tools out there, but my company prefers
to pay for a commercial product "for security reasons"
Just wanted to get an idea of the tools that you have already used
Our requirement would be one which is command-line so that we can write
batch files to automate file downloads
I had a look at WS_FTP and CuteFTP but these do not suit our requirements
Thanks to all
Ronish

--
Joel Merrick
GPG Public Key - https://www.servicestyle.com/joel_servicestyle.asc

[Owen, Matt]

Core FTP lite works well


Matt Owen

-----Original Message-----
From: Edwin Rene [mailto:***@link.net.id]
Sent: Friday, November 12, 2004 12:32 AM
To: ***@yahoo.com; security-***@securityfocus.com
Subject: Re: Secure FTP Client

You might want to look at FlashFXP at www/flashfxp/com

Regards
Ed
----- Original Message -----
From: <***@yahoo.com>
To: <security-***@securityfocus.com>
Sent: Tuesday, November 09, 2004 1:20 PM
Subject: Secure FTP Client

Post by s***@yahoo.com
Hi List,
I am looking for a Secure-FTP client for Windows which I can use to
connect to a Secure-FTP server which is an AIX machine running

Open-SSH

Post by s***@yahoo.com
I know there are lots of FREE tools out there, but my company prefers
to pay for a commercial product "for security reasons"
Just wanted to get an idea of the tools that you have already used
Our requirement would be one which is command-line so that we can

write

Post by s***@yahoo.com
batch files to automate file downloads
I had a look at WS_FTP and CuteFTP but these do not suit our

requirements

Post by s***@yahoo.com
Thanks to all
Ronish

[s***@yahoo.com]

In-Reply-To: <***@localhost>

Dear all,
Thank you for your replies, will try to use the different products that have been proposed in the list

Was just thinking about another issue, if the file transfer has to be done by an operator (who does not need to know the password to access the FTP site), how to prevent him from accessing the batch file (which is in clear text)...

Cheers,
Ronish

[Jonathan Loh]

You can try compiling the batch file, but depending on the compiler a simple
strings command may give you the password.

Post by s***@yahoo.com
Dear all,
Thank you for your replies, will try to use the different products that have
been proposed in the list
Was just thinking about another issue, if the file transfer has to be done by
an operator (who does not need to know the password to access the FTP site),
how to prevent him from accessing the batch file (which is in clear text)...
Cheers,
Ronish

__________________________________
Do you Yahoo!?
The all-new My Yahoo! - Get yours free!
http://my.yahoo.com

[STE-MARIE, ERIC]

Post by Jonathan Loh
You can try compiling the batch file, but depending on the compiler a simple
strings command may give you the password.

Post by s***@yahoo.com
Dear all,
Thank you for your replies, will try to use the different products that have
been proposed in the list
Was just thinking about another issue, if the file transfer has to be done by
an operator (who does not need to know the password to access the FTP site),
how to prevent him from accessing the batch file (which is in clear text)...
Cheers,
Ronish

If you can program a little perl, you can always use it to program you
sftp transfer along with Crypt::OpenPGP and keep the password encrypted
and give THIS (the private key) password to the operator. Also, you
need to make sure that gpg is not installed on that machine. To make
things harder, you make sure he runs the perl script under an other user
id. The goal here is to prevent access to the private OpenPGP key
needed to unlock the password. You then make sure this other user id's
OpenPGP keys are not accessible by the operator (chmod). Also make sure
that the encrypted password file is not accessible by the operator
(chmod again). Then give the operator access to run the script only by
sudo as the running user id. You need to protect the private key and
password encryted file to prevent the user from sending these file to an
other computer that has gpg installed, which would make the decrypting
job easy.

This is not bullet proof, of course, but it prevents a user from
accidentally viewing the password you want to protect.
--
Eric Ste-Marie
Conseiller Technique
Connexim, une société en commandite de Bell Canada.

Téléphone: 514-281-4333 (x.2754)


PGP ID: DE936E29
PGP Fingerprint: 7D73 2AD5 7E5A E774 6A7B E1BA 411F 969C DE93 6E29