Transcription

2013Cerberus, LLCGrant Averett[CERBERUS FTP SERVER 6.0]User manual for Cerberus FTP Server 6.0. It contains detailed steps and help on configuring Cerberus FTP Server.

CONTENTSIntroduction . 10Description . 10Guide . 10Minimum System Requirements . 11Hardware Requirements . 11Operating Systems . 11Cerberus FTP Server 3.0 and 4.0 . 11Cerberus FTP Server 5.0 and higher . 11Installation . 12Upgrading an Existing Installation . 18Method 1: Using the Auto-updater . 18Method 2: Manually downloading and running the latest Installer . 18Getting Started - Initial Setup Wizard . 19The Wizard. 19Step 1 - Licensing . 19Step 2 - Initial User Creation . 20Step 3 - Network Setup . 22Step 4 – Security. 24Getting Started - Network Setup. 26Basic Setup so users can connect from the Internet . 26Step 1 - Control Connection. 26Step 2 - Passive Mode . 26Step 3 - Firewall . 26How many types of FTP are there? . 27Controlling what types of FTP are Allowed . 27Restricting FTP connections at the User level . 27

Restricting FTP connections at the Listener level . 28SSH2 SFTP Setup . 29About SSH SFTP Support in Cerberus FTP Server . 29Supported SSH2 Key Exchange Methods . 29Supported SSH2 Ciphers . 29Supported SSH2 MAC Algorithms . 29Adding an SSH2 SFTP Listener . 30Allowing SSH2 SFTP Connections through a Firewall . 30Enabling or Disabling Existing SFTP Listeners . 30Configuring the Server . 31Allowing External Access to your Server . 31Common Network Configurations . 32Configuration 1: Your computer is connected directly to the Internet . 32Configuration 2: Your computer is connected to a router, and the router is connected to the Internet . 32The Summary View . 34Understanding the Summary View . 34Common System Messages . 35The User Manager . 37About Cerberus FTP Server Authentication . 37Adding a new user . 38Configuring a user for SSH Public Key Authentication. 40The Virtual Directory System. 40Simple Virtual Directory mode . 40Standard Virtual Directory mode . 40Variables that can appear in Virtual Directory Names and Paths . 41Adding a virtual directory to a user account . 41Virtual Directory Permissions . 43

Cerberus Group Accounts . 44About Groups . 44Overriding Group settings for a User . 45Adding a new group . 45User Policy Settings . 47Authentication Order . 47Authentication Requirements . 47Password Complexity Requirements . 48Password Change Policy . 49Password History . 49General Settings . 50Configuring General Settings . 50General . 50Network . 51Notification . 51Configuring Logging Support . 52Auditing . 52Log File Location . 52On Windows Vista, Windows 2008 and above . 52On Windows 2003, XP, and 2000 . 52Configuring Logging . 52Screen Logging Settings . 55Root Log Level . 55Screen Logging Settings . 56Syslog Support. 56Interface Settings . 57Configuring Interface Settings . 57

Types of Listeners . 57Adding a New Interface Listener . 58Interface Settings . 58The "Default" Interfaces. 60Interface Status Controls. 60The HTTP/S Web Client . 62Adding an HTTP/S Listener . 63Web Client Customizations . 64Changing the Company Logo and Login Image. 64Changing the Login Welcome Message . 65Further Web Client Customizations . 65Web Account Requests . 66Allowing Users to Request Accounts through the Web . 66Requesting a New Account . 66Enabling or Disabling Account Requests . 67Approving or Denying Account Requests . 68Security Settings . 70Configuring Security Settings . 70Digital Certificate Support . 70About Certificate Authorities . 70TLS/SSL Security . 71Security Options . 71Client Certificate Verification. 72Advanced Security Options . 73DSA Certificates and Ephemeral Diffie-Hellman Keys . 74Elliptic Curve SSH Support . 75Remote Settings . 76

Configuring Remote Settings . 76Remote Access . 76Web Administration . 77Miscellaneous Settings . 79Configuring Miscellaneous Settings . 79FTP Directory Listing Time Format . 79FTP Compression . 80Other. 80Setting up a Database for Statistics . 81Installing Microsoft SQL Server 2012 LocalDB . 82For the 64-bit version of Cerberus FTP Server: . 83For the 32-bit version of Cerberus FTP Server: . 83Selecting a Database . 83Database Backup and Restore . 84Advanced Settings . 85Configuring Advanced Settings. 85Send and Receive Buffers . 85PASV Port Range . 86Windows NT . 86HTTP/S Advanced Settings . 87The IP Manager . 88The "General" page . 88Adding a single IP address to the IP manager policy . 89Adding a range of IP addresses to the IP manager policy . 89Deleting a IP addresses from the current policy. 89Searching for an IP Address . 89The "Auto-Blocking" page . 90

Differences in Auto-blocking between Blacklist mode and Whitelist mode. 92The Event Manager . 93About Event Rules . 93The Rules page . 93The Targets page. 94SMTP Server Targets . 95Executable Targets . 95The Edit Rule page . 95Available Event Rule Types . 96Adding New Rule or Editting an Existing Rule . 97Adding Rule Conditions . 97Adding Rule Actions . 99The Report Manager. 100Generating a Report. 100File Access Reports . 101LDAP Authentication . 102Default Virtual Directory Mapping for LDAP Users . 103Other LDAP Dialog Options . 104Setting up Active Directory Authentication using LDAP . 104LDAP User to Cerberus Group Mapping . 106Creating an LDAP User to Cerberus Group Mapping . 106Removing an LDAP mapping . 106Active Directory Authentication. 107About Active Directory Integration . 107Default Virtual Directory Mapping for AD Users . 108Active Directory FTP Security Group . 108Authenticating Against more than one Active Directory Domain. 108

Understanding Windows Authentication . 108The "Guest" Account . 109Active Directory User to Cerberus Group Mapping . 109Creating an AD User to Cerberus Group Mapping. 110Creating an AD Group to Cerberus Group Mapping . 110Removing an AD mapping . 111Entering a license for Cerberus FTP Server . 112The Registration dialog box . 112The Synchronization Manager . 114Backup Server Requirements . 115Available Settings . 115Backup Server . 115Synchronization Settings . 115Server Certificates . 117What is a Server Certificate? . 117Can I just use a Self-Signed Certificate? . 117More Information . 117Certificate Signing Request . 118Creating a Certificate Signing Request . 118Submitting your CSR to a Certificate Authority . 119Assigning your Certificate and Private Key in Cerberus FTP Server . 119Installing a Digital Certificate . 121Digital Certificate Support . 121Creating a Self-Signed Certificate . 121Steps to Create a Self-Signed Certificate: . 121Using a Certificate created by a 3rd Party Certificate Authority. 123Steps to Import a 3rd Party Certificate: . 123

Clustering . 125Failover Clustering and Load Balancing . 125Load Balancing Exceptions . 125Web Services control . 126Ava

CERBERUS FTP SERVER 3.0 AND 4.0 Windows 2000 Professional and Server SP4 Windows XP SP3 Windows 2003 Server and R2 Windows Vista SP2 Windows 7 SP2 Windows 2008 Server and R2 CERBERUS FTP SERVER 5.0 AND HIGHER Windows XP SP3 Windows 2003 Server and R2 Windows Vista SP2 Windows 7 SP2