Security Options
To enable encryption, select one of the following options:
|
• |
None: Disables encryption.
|
|
• |
Explicit FTPS (SSL/TLS): In this method, BlueZone Secure FTP connects to the typical FTP server port 21 and starts an unencrypted FTP session as
normal, but requests that SSL/TLS security be used and performs the appropriate handshake before sending any sensitive data.
This is the preferred method according to RFC 4217. Explicit FTPS is also sometimes referred to as AUTH TLS.
|
|
• |
Implicit FTPS (SSL/TLS): In this method, BlueZone Secure FTP connects to a non-typical port (usually 990), and an SSL/TLS handshake is performed
before any FTP commands are sent.
|
♦ |
Enable Clear Control Channel: If enabled, BlueZone Secure FTP attempts to use a clear control connection but an encrypted data connection.
|
|
♦ |
Enable Clear Data Channel: If enabled, BlueZone Secure FTP sends the data in the data channel without any encryption.
|
|
|
• |
SFTP (SSH): Enables Secure FTP known as SSH. When you are connected to an SFTP host, a small padlock is displayed on the status bar.
If you click the padlock, an SFTP Connection Status dialog opens.
|
Encryption Type
Specifies which version of the SSL protocol must be used. The following options only apply to Explicit FTPS and Implicit FTPS.
You must specify one or the other.
|
• |
SSL v3: (Default) Specifies that SSL version 3 must be used.
|
|
• |
TLS v1: Specifies that TLS version 1 must be used.
|
Note
SSL v3 and TLS v1 are nearly identical. TLS v1 is preferred.
Invalid Certificates
Specifies how to handle an invalid server certificate. Options include:
|
• |
Always Reject: Specifies that an invalid server certificate must always be rejected.
|
|
• |
Ask Before Accepting: Specifies that the user must be asked whether to accept an invalid server certificate.
|
|
• |
Always Accept: Specifies that an invalid server certificate must always be accepted.
|
Preferred Cipher Suite
If you have a preference, select a cipher suite from the drop-down box. Otherwise leave it set to AES.