Setup Secure File Transfers over FTPes - Revision history

>Jeremyb: /* Summary */

2014-02-14T00:09:02Z

‎Summary

>Jeremyb at 00:08, 14 February 2014

2014-02-14T00:08:50Z

>Jeremyb: /* Confirm FTPes works */

2014-02-14T00:05:40Z

‎Confirm FTPes works

>Jeremyb: /* Enable FTPes on HPUX */

2014-02-14T00:04:24Z

‎Enable FTPes on HPUX

>Jeremyb at 00:00, 14 February 2014

2014-02-14T00:00:18Z

>Jeremyb: /* Setup FTP Server */

2014-02-13T23:38:22Z

‎Setup FTP Server

>Jeremyb at 23:37, 13 February 2014

2014-02-13T23:37:59Z

>Jeremyb at 23:34, 13 February 2014

2014-02-13T23:34:45Z

>Jeremyb at 23:31, 13 February 2014

2014-02-13T23:31:06Z

>Jeremyb: Created page with "==Summary== How to enable file transfers between the HPUX and Windows Vital Signs server host via FTP over TLS (FTPes)"

2014-02-13T22:45:31Z

Created page with "==Summary== How to enable file transfers between the HPUX and Windows Vital Signs server host via FTP over TLS (FTPes)"

New page

==Summary==
How to enable file transfers between the HPUX and Windows Vital Signs server host via FTP over TLS (FTPes)

@@ Line 7: / Line 7: @@
 * Windows Server 2008, 2008R2
 * FileZilla Server .9 or later
-* Windows Firewall policy to allow port 21 inbound
+* Windows Firewall policy to allow port 21 TCP inbound
 ==Setup FTP Server on Windows==

← Older revision		Revision as of 00:08, 14 February 2014
Line 2:		Line 2:
	How to enable file transfers between the HPUX and Windows Vital Signs server host via FTP over TLS (FTPes)		How to enable file transfers between the HPUX and Windows Vital Signs server host via FTP over TLS (FTPes)

		+	Requirements :
		+	* Vitalsigns 1.5.25 or later
		+	* Python 2.7 HPUX Depot with requires ssl dependencies
		+	* Windows Server 2008, 2008R2
		+	* FileZilla Server .9 or later
		+	* Windows Firewall policy to allow port 21 inbound

@@ Line 101: / Line 101: @@
-==Confirm FTPes works==
+==Confirm FTPes Connectivity==
 Use your favorite ftp client that supports FTPes and setup a connection for the new FTPes Server with the following settings :
@@ Line 109: / Line 109: @@
 * Port 21
 Try to connect with the client and then review the FileZilla Server logs in the Server
 ==Enable FTPes on HPUX==

← Older revision		Revision as of 00:04, 14 February 2014
Line 134:		Line 134:

	Review the stdlist for the following to indicate that the connectivity is secure :		Review the stdlist for the following to indicate that the connectivity is secure :
		+
		+	<pre>
		+	VSFTP INFO - version 1.6
		+	VSFTP INFO - FTP_TIMEOUT is not set in vitalsigns.ini - Defaulting to 30
		+	VSFTP INFO - FTP_PROTOCOL is not set in vitalsigns.ini - Defaulting to TLSv1
		+	VSFTP INFO - FTP_VERBOSE is not set in vitalsigns.ini - Defaulting to No
		+	VSFTP INFO - data/mbrshln is a valid directory
		+	VSFTP INFO - Valid hostpath detected: data/mbrshln
		+	VSFTP INFO - Files found, begin FTP
		+	VSFTP INFO - FTP over TLS enabled
		+	VSFTP INFO - FTP ssl set to TLSv1
		+	VSFTP INFO - Successfully connected to FTPes host 192.168.##.## : 21
		+	VSFTP INFO - FTP Active Mode Enabled
		+	VSFTP INFO - FTP login successful
		+	</pre>

← Older revision		Revision as of 00:00, 14 February 2014
Line 25:		Line 25:

	[[File:Vitalsignsftpes10.png]]		[[File:Vitalsignsftpes10.png]]
−


Line 99:		Line 98:

	[[File:Vitalsignsftpes23.png]]		[[File:Vitalsignsftpes23.png]]
		+
		+
		+
		+	==Confirm FTPes works==
		+
		+	Use your favorite ftp client that supports FTPes and setup a connection for the new FTPes Server with the following settings :
		+	* FTPes (FTP over SSL/TLS)
		+	* Prot P
		+	* Active (not PASV)
		+	* Port 21
		+
		+	Try to connect with the client and then review the FileZilla Server logs in the Server
		+
		+
		+	==Enable FTPes on HPUX==
		+
		+	Once the FTPes server connectivity to an external client has been confirmed, login to the HPUX box as the askplus user and edit /ASKPLUS/vsdata/vitalsigns.ini
		+
		+	Confirm the following FTP settings are appropriate for your setup :
		+
		+	<pre>
		+	FTP_USER=yourftpuser
		+	FTP_PASSWD=yourpassword
		+	FTP_PORT=21
		+	FTP_PASV=No
		+	FTP_SECURE=Yes
		+	</pre>
		+
		+
		+	Test the nightly run by doing the following
		+	<pre>
		+	login bolive
		+	/VSJOBS/JVSLOAD_HIST
		+	</pre>
		+
		+	Review the stdlist for the following to indicate that the connectivity is secure :

@@ Line 4: / Line 4: @@
-==Setup FTP Server==
+==Setup FTP Server on Windows==
 Currently as of version 1.6, FTPes is only supported with FileZilla Server for Windows
@@ Line 66: / Line 66: @@
 [[File:Vitalsignsftpes17.png]]
 ==Setup a User==

@@ Line 35: / Line 35: @@
 Once logged into the Server UI, select Edit, Settings
-[[File:Vitalsignsftpes12.png]]
+[[File:Vitalsignsftpes12.PNG]]
@@ Line 73: / Line 73: @@
 In the FTP Server UI, select Edit, Users
-[[File:Vitalsignsftpes18.png]]
+[[File:Vitalsignsftpes18.PNG]]

@@ Line 33: / Line 33: @@
-Once logged into the Server UI, select Edit->Settings
+Once logged into the Server UI, select Edit, Settings
 [[File:Vitalsignsftpes12.png]]
-Under Logging, check '''Enable logging to file''' and choose to create new log files for each day with 30 days of retention
+Under Logging, check ''Enable logging to file'' and choose to create new log files for each day with 30 days of retention
 [[File:Vitalsignsftpes13.png]]
@@ Line 71: / Line 71: @@
 ==Setup a User==
-In the FTP Server UI, select Edit->Users
+In the FTP Server UI, select Edit, Users
 [[File:Vitalsignsftpes18.png]]

← Older revision		Revision as of 23:31, 13 February 2014
Line 1:		Line 1:
	==Summary==		==Summary==
	How to enable file transfers between the HPUX and Windows Vital Signs server host via FTP over TLS (FTPes)		How to enable file transfers between the HPUX and Windows Vital Signs server host via FTP over TLS (FTPes)
		+
		+
		+
		+	==Setup FTP Server==
		+
		+	Currently as of version 1.6, FTPes is only supported with FileZilla Server for Windows
		+
		+	[https://filezilla-project.org/download.php?show_all=1&type=server Download FileZilla Server Here]
		+
		+	After downloading the file, run the exe on the Windows server where Vital Signs will be hosted to begin the File Zilla Server setup
		+
		+	The following are the recommended settings
		+
		+	[[File:Vitalsignsftpes5.png]]
		+
		+	[[File:Vitalsignsftpes6.png]]
		+
		+	[[File:Vitalsignsftpes7.png]]
		+
		+	[[File:Vitalsignsftpes8.png]]
		+
		+	[[File:Vitalsignsftpes9.png]]
		+
		+	[[File:Vitalsignsftpes10.png]]
		+
		+
		+
		+	Once the installation is complete, the File Zilla Server UI should prompt to Connect to Server. Click OK
		+
		+	[[File:Vitalsignsftpes11.png]]
		+
		+
		+	Once logged into the Server UI, select Edit->Settings
		+
		+	[[File:Vitalsignsftpes12.png]]
		+
		+
		+	Under Logging, check '''Enable logging to file''' and choose to create new log files for each day with 30 days of retention
		+
		+	[[File:Vitalsignsftpes13.png]]
		+
		+
		+	Under SSL/TLS settings, check ''Enable FTP over SSL/TLS support (FTPS)'', ''Allow explicit FTP over TLS'', ''Disallow plain unencrypted FTP'' and ''Force PROT P to encrypt file transfers in SSL/TLS mode''
		+
		+	Finally, click ''Generate new certificate...''
		+
		+	[[File:Vitalsignsftpes14.png]]
		+
		+
		+	Select 2048bit for the key size
		+
		+	Enter the appropriate information for the certificate
		+
		+	Enter a path for the vitalsigns-ftpes-certificate.crt file to be generated in and click ''Generate certificate''
		+
		+	[[File:Vitalsignsftpes15.png]]
		+
		+	[[File:Vitalsignsftpes16.png]]
		+
		+
		+	You should now see the Private key file and Certificate file populated.
		+
		+	Click OK
		+
		+	[[File:Vitalsignsftpes17.png]]
		+
		+
		+
		+	==Setup a User==
		+
		+	In the FTP Server UI, select Edit->Users
		+
		+	[[File:Vitalsignsftpes18.png]]
		+
		+
		+	Click Add under Users
		+
		+	[[File:Vitalsignsftpes19.png]]
		+
		+
		+	Enter the ftp user name and click OK
		+
		+	[[File:Vitalsignsftpes20.png]]
		+
		+
		+	Click the Password: box and enter the ftp user password
		+
		+	Check the ''Force SSL for user login'' and click OK
		+
		+	[[File:Vitalsignsftpes21.png]]
		+
		+
		+	Under the Shared folders, click Add
		+
		+	[[File:Vitalsignsftpes22.png]]
		+
		+
		+	Select the path to the vitalsigns directory and check the ''Read'',''Write'' and ''Delete'' check boxes and click OK
		+
		+	[[File:Vitalsignsftpes23.png]]