Tunneling ftp through a ssh connection works well. Check out www.openssh.org, the addon program is called sftp. You would need a unix box of some sort to do this, but it could be done transparently if the ftp home dir on the unix box was mounted via samba onto the windows machine. A IPSEC based VPN might be a good solution for you as well. The data would be unencrypted on your local network, but assuming you are using a full switched local network, it would be _fairly_ secure. The users would just establish a tunnel to your firewall/vpn server, and use their clear text protocols (ftp, http, mail) to connect to the servers behind your firewall.
Jeremy Parr On Thu, 2001-10-18 at 11:50, Benjamin, Dan wrote: > Hi all, > I have been tasked with finding and implementing solutions to provide > payroll vendors/401k vendors and health care providers with methods our > company can use to transmit encrypted files via Website (IIS), FTP, and > E-mail (Exchange). We are a total MS shop. I thought of looking to Verisign > for Website encryption, PGP possibly for e-mail, and don't have a thought on > FTP other than encrypting a zip file. We don't have anonymous login > available on FTP. Could I get some thoughts on Verisign and PGP and options > of FTP methods. > > Thanks >
