LevelBlue Knowledge Base » Knowledgebase » FTP

How to handle FTP URL with a password containing special characters ?

Rudolf Kessler — Thu, 23 Aug 2012 00:03:02 GMT

This article applies to:

SWG 9.x
SWG 10.x

Question:

It is very common to use special characters in FTP passwords. These characters may cause browser conflicts when used for inline URL access.

Procedure:

For example, the password for FTP account USER on some_ftp_server.com is P@$$WORD - so the URL for browser access is:

ftp://USER:P@$$WORD@some_ftp_server.com

Special characters (@, $) in this URL have to be hex encoded to operate without any conflicts. And the hex conversion will look as following:

ftp://USER:P%40%24%24WORD@some_ftp_server.com

where %40 is the hex value (0x40) of '@' character and %24 is the hex value (0x24) of '$' character.

For complete list of special characters conversion codes refer to the following resource: http://www.ascii.cl/htmlcodes.htm

How to configure FileZilla 3.x for use with FTP Proxy

Rudolf Kessler — Fri, 02 Mar 2012 03:31:01 GMT

Question
How do I configure FileZilla Client for use with the FTP Proxy (uploaded/downloaded files scanning, Native FTP)?

Answer
In order to set FileZilla to work with FTP Proxy, the following actions need to be taken:

1) Edit -> Settings -> FTP Proxy.

2) Set Type of FTP Proxy to Custom and type:

3) Set Proxy Host to the IP Address of your Scanner/Proxy IP and Port, seperated by colon - the default port is 2121.

4) Use the FTP client normally, all FTP session will be created via the proxy (scanner).

Software Version
not related to any SWG version

This article applies to:

This article was previously published as:: Finjan KB 1684

How to enable the Native FTP proxy and how to use it

Rudolf Kessler — Fri, 20 Aug 2010 05:14:41 GMT

Question

How can I configure the scanning server to work with native FTP?

Answer

In order to enable the scanner to scan native FTP sessions:

1. In Versions 8.5: Log in to the managment console and go to Settings -> Devices -> Scanner IP -> FTP.
In Version 9.0 and above: Log in to the management console and go to Administration -> System Settings -> Finjan Devices -> Scanner IP -> FTP.

2. In the FTP Configuration mark the ‘Enable FTP’ check box and other settings if needed.

3. Apply and commit the changes.

4. In order to check that the scanner actually scan the FTP data, here are two examples showing how to verify that the scanner is actually checking the FTP sessions.

In order to do this we must make sure that the FTP session will go through the proxy (example: SGW appliance IP is 10.194.48.1).

Start ftp CLI client:
> ftp
set the session to move through the scanner (proxy)
open:
> open 10.194.48.1 2121

The following prompt will be displayed:
220 Frox transparent ftp proxy. Login with username[@host[:port]] [client_ip][/client_username]
User (10.194.48.1:(none)):

Enter the login details.
For example:
anonymous@ftp.zillionsofgames.com:21

After this the phase we have a connection to the remote FTP via the proxy (scanner).
Any download operation will be examined by it.

Example of a ‘get’ request from the FTP server:

ftp> get sampzeng.zip
200 PORT command successful.
150-Starting Transfer
150-There'll be a delay while we scan for viruses
150-Scanning file for viruses
150 Not starting Transfer
451 File contains virus. Aborting

Related article(s)
Q13497 - How to configure FileZilla 3.x for use with FTP Proxy

Software Version
8.5
9.x

This article applies to:: NG 1000; NG 5000; NG 6000; NG 8000

This article was previously published as:: Finjan KB 1249