Filter by Category

What is FTPS?

learn about the secure file transfer protocol FTPS

Whether you’re looking to upgrade from your current FTP file transfers or have new requirements from a trading partner or customer, you might be wondering what FTPS is. How does it work, you may ask. Does it differ from secure file transfer protocols like SFTP and AS2?

Good questions. Let’s start by defining what FTPS is.

What is FTPS?

At its core, FTPS (FTP over SSL) is a secure file transfer protocol that allows you to connect securely with your trading partners, customers, and users. When file transfers are sent, they are exchanged using FTPS and can be authenticated through FTPS-supported methods like passwords, client certificates, and server certificates.

Anything Else I Should Know About FTPS?

Algorithms & Authentication

FTPS implements strong algorithms like AES and Triple DES to encrypt file transfers. For authentication when connecting to trading partner servers and vice versa, FTPS uses a combination of user IDs, passwords, and/or certificates to verify authenticity.

Compliance

If compliance is a concern in your organization, you can achieve various security  requirements with FTPS, including PCI DSS, HIPAA, HITECH, SOX, and state privacy laws.

TLS & Certificates

FTPS uses TLS (and SSL, though SSL is now considered insecure by PCI DSS and most industry standards) to encrypt server connections. X.509 certificates are used to authenticate these connections. They contain identifiable information like issuer name, subject name, subject public key details, and signature.

When using certificates, they’re considered trustworthy if signed by a known certificate authority (CA) or self-signed by a trading partner. Certificates signed by a CA are easy to validate using the chain of trust that is built into the standard. To validate self-signed certificates, you must have a copy of the trading partner’s public certificate in your trusted key store.

One Downside to FTPS

There is one downside to FTPS you should be aware of: FTPS can be difficult to connect through firewalls with high levels of security. FTPS uses multiple port numbers for implicit and explicit connection types, so every time a file transfer or directory listing request is made, another port will open. This can put your network at risk and open you up to vulnerabilities if you aren’t careful and alert or have strategies in place to avoid them.

Does FTPS Differ from Other Secure FTP Protocols?

We already know that, by nature, FTPS is far more secure, reliable, and flexible than basic FTP or homegrown file transfer solutions. But what is the difference between FTPS and a different secure protocol, like SFTP?

Well, we have that answer for you already, wrapped neatly in a detailed blog post:

Which is Better: SFTP vs. FTPS?

If you’re looking at FTPS versus protocols like AS2 or HTTPS, the answer truly depends on your scenario and your trading partners.

For example, are you planning to transmit EDI documents and need a protocol that provides a high degree of security assurance? You may want to look into AS2 for your file transfers. And if you’re exchanging files with websites using HTTP servers, HTTPS may be your best choice for that particular requirement.

Meet Your Requirements with Managed File Transfer 

Choosing or using FTPS as your secure file transfer protocol is a smart, efficient way to exchange files in your organization. However, FTPS doesn’t operate in a void! In order to effectively implement all the features of FTPS and more, you’ll either need to find an FTPS tool or go with a centralized, all-in-one file transfer solution like managed file transfer.

An MFT solution can be used by organizations of all sizes for needs ranging from a few dozen file transfers a week to thousands or more exchanged a day. With strong encryption practices in place (e.g., Open PGP or AS2), IT teams can be sure MFT will protect their data no matter the size, contents, or frequency of the file transfer.

Watch the On-Demand Webinar: Managed File Transfer 101

Beyond file transfers, some MFT solutions including GoAnywhere MFT, have the ability to handle critical file transfer requirements for sharing large files via an accelerated file transfer protocol, on-premises collaboration features, or even a secure mail plugin for email clients like Outlook.

Having all these options in one product accomplishes the goal of centralizing, managing, and tracking your file exchanges in one place, giving you better file security and peace of mind.

See What’s Beyond FTP: Secure and Manage Your Data

Whether you need FTPS to meet trading partner requirements or you’re looking to update your FTP implementation to a more modern framework, you’re in this right place. Use this white paper, titled “Beyond FTP: Securing and Managing File Transfers,” to discover the options you have outside of scripts and legacy file transfer tools.

Get the White Paper

 

Latest Posts


Everything You Need to Know about PGP Encryption

June 25, 2019

What is PGP? PGP, or Pretty Good Privacy, is one of the most popular encryption methods used today. It is used by banks, financial institutions, healthcare organizations, and other highly regulated…


Automation Operations: 5 Benefits of Automation

June 25, 2019

Advantages of Automation Visions of a mechanized world flourished long before the term “automation” was coined. The star of Westinghouse’s exhibit at the 1939 World’s Fair was Electro,…


6 Ways to Get Internal Buy-In for Your MFT Solution

June 21, 2019

There are a lot of moving pieces that go into a product evaluation. You need to navigate through the myriad of options in today's marketplace, attend vendor demonstrations, try the software in a test…


What is a DMZ and Why Do You Need a DMZ Gateway?

June 19, 2019

If you’ve watched a science-fiction movie about space travel, then you’ve likely seen some version of a scene in which an astronaut reenters their ship from the outside abyss. Because the ship…


Eight Hacks You Can Implement to Combat "Hackable" Network Vulnerabilities

June 18, 2019

Although we’re becoming savvier to the tricks hackers have pulled in the past, they are still working to up their game and catch us where and when we least expect it. Fortunately, there are some…