Administrator's Guide - Kerio Software Archive

13.5 FTP Policy
Open the General tab to set general rules and actions to be taken.
Description
Description of the rule (information for the administrator).
If user accessing the FTP server is
Select which users this rule will be applied on:
• any user — the rule will be applied on all users (regardless whether authenticated
on the firewall or not).
• any user authenticated on the firewall — applied on all authenticated users.
• selected user(s) — applied on selected users or/and user groups.
Click on the Set button to select users or groups (hold the Ctrl and the Shift keys
to select more that one user /group at once).
Note: Rules designed for selected users (or all authenticated users) are irrelevant unless
combined with a rule that denies access of non-authenticated users.
And the FTP server is
Specify FTP servers on which this rule will be applied:
• any server —any FTP server
• server — IP address of DNS name of a particular FTP server.
If an FTP server is defined through a DNS name, Kerio Control will automatically
perform IP address resolution from DNS. The IP address will be resolved
immediately when settings are confirmed by the OK button (for all rules where
the FTP server was defined by a DNS name).
Warning:
Rules are disabled unless a corresponding IP address is found!
• IP address from group — selection of IP addresses of FTP servers that will be
either denied or allowed.
Click on the Edit button to edit IP groups (for details see chapter 15.1).
Action
Select an action that will be taken when requirements for users and the FTP server are
met:
• Allow — Kerio Control allows connection to selected FTP servers under conditions
set in the Advanced tab — see below).
• Deny — Kerio Control will block certain FTP commands or FTP connections
(according to the settings within the Advanced tab).
Check the Log option to log all FTP connections meeting this rule in the Filter log (see
chapter 22.9).
Go to the Advanced tab to define other conditions that must be met for the rule to be applied
and to set advanced options for FTP communication.
187