Hello,

Starting March 1st 2013, shared Linux accounts will be required to use SSL/TLS when connecting to the ftp server.  This requirement is in place to improve security for the server and your account logins as well as to satisfy a PCI requirement.  Most FTP clients nowadays support FTPS (FTP over SSL/TLS) .  VPS customers may have this requirement set in their config if they want to by contacting us to have it put in place.

Please review the following knowledgebase article for more info on using FTPS, which ftp clients we know support it and which do not.

If you do not use FTP to manage your files on our servers or you use a webmaster, there is nothing for you to do.

http://u2-web.com/knowledgebase/40/FTP-over-SSL.html

Update: 3/1/2013 - 12:40 AM - We're investigating a firewall conflict with FTPS (not yet set to required) that is causing some FTPS sessions to timeout while retrieving directory listings.  As such this changeover has been pushed up to Monday, February 4th.

Update: 3/6/2013:  the mentioned firewall conflict has been resolved for a few days and we have waited to confirm any other issues.  This change will be done tonight.

Update: 3/6/2013 - 11:38 PM:  FTPS has been set to required on all shared linux servers.  An internal PCI scan is underway to confirm this change will keep our servers PCI compliant.  Again, please check the knowledgebase article mentioned above for information on FTPS and which FTP clients we know to work with this setup.  If you find other FTP clients that work, please let us know so that we can add to help other customers.

Update: 3/13/2013 - 12:25 AM:  Unfortunately due to many different factors from many customers using clients that can't support ftps and those they can not upgrade and they not changing, PCI scans not accepting the changes.  As such, at this time we have disabled the FTPS requirement, however, would still recommend customers use FTPS.  Also, any new deployments would likely have this requirement in place.

Update:  4/19/2014 - Web7-us will be changed to require FTPS on 4/20/2014 . 

Friday, April 19, 2013

« Back