TechNotes

WYDOT IT makes changes to FTP to make it more secure

By Aimee Inama

WYDOT is making changes to its FTP servers to provide a more secure environment while ensuring users can still access and transfer large files electronically.

IT is planning to switch the FTP server setup from a single server to two servers in March. The previous setup housed both secure and anonymous FTP transfers on a single server.

To provide an extra layer of security, IT will move the anonymous FTP and secure FTP to two separate systems for added protection.

FTP allows for the transfer of large files that can’t be emailed.

The new system will enable users to have access to either the anonymous or secure FTP systems, depending on their needs.

For the anonymous FTP site, users have several ways to transfer files.

For the web client feature, IT can create groups consisting of members who can then send files back and forth. For example, there could be a Public Affairs group within the anonymous FTP. Members of the Public Affairs group can then send large files to each other.

However, with this being an anonymous FTP, there is the chance that an outside party could gain access to those files.

The anonymous FTP site will continue to have an anonymous login feature as well. Some programs currently use this feature and the new system will continue to offer that.

For the anonymous login feature, IT creates a folder with an anonymous login. IT can set the security on that folder so that other people can’t upload files and only the owners of that file can upload to it.

Another option on the anonymous site would be to use the file sharing option. That features turns the file sharing requests into an email system where a user can request files and send files to someone, when the file is too large to be emailed directly.

Within the system, a person would just complete the necessary fields, upload their files and send an email to the person they want to share it with. There’s an option of adding a password to make it more secure to each user. The person who gets the email sent to them will receive a link where they can access the files. Users can specify the length of time the link is available for use before it’s automatically deleted.

This option is more secure than the anonymous FTP access as long as https is used to access the site.

If employees need a more secure option because they are dealing with sensitive information or with a third-party vendor, the secure FTP (SFTP), site would be the best option.

To have access to the secure FTP, employees will need to contact IT and let them know the IP address of the outside person or company that needs to be added to a whitelist, which would give them permission to access the SFTP server. A password would also be created so the person can access the system.

IT would then create a secure folder that only the sender and receiver can access. IT can also create a group of people that can access that particular folder.

Employees who need access to the secure FTP site or need it set up should contact AJ Myers, Cheyenne IT Applications, at aj.myers@wyo.gov. n

Google training available

Looking to brush up on your Google app understanding? OnBoarding a State employee who is new to the Google suite? Have a Google App question? Curious about the new Google Meet features?

ETS is proud to announce the February-May 2021 virtual Google Apps training dates!

These courses are for beginners, advanced courses are in the works!

Held the 3rd Wednesday of each month: (March 17, April 21, May 19) 9 a.m. - 10 a.m. Gmail 11 a.m. - Noon Google Calendar 1 p.m. - 2 p.m. Google Drive 3 p.m. - 4 p.m. Google Sheets

There is no need to RSVP for the training sessions. If you are able to attend please try to arrive at the top of the hour.

ETS supports your professional growth and we’re pleased to help you make the most of G Suite. For more information and the Held the 3rd Thursday of each month: (March 18, April 22, May 20) 9 a.m. - 10 a.m. Google Slides 11 a.m. - Noon Google Docs 1 p.m. - 2 p.m. Google Forms 3 p.m. - 4 p.m. Google Meet

course descriptions, please visit the ETS Training Portal or email ETS Trainer, Jennifer Proctor, at ets-gct-trainer@wyo.gov. n