11

We have a client who wishes to send files to us via SFTP (citing that FTP is inherently insecure). We have a Windows Environment (Windows 2003 Server).

Currently, I'm reviewing copssh (OpenSSH for Windows, http://www.itefix.no/i2/copssh), and am looking for alternatives, or thoughts on copssh or any other SFTP option for Windows. The simpler to setup and administer, the better.

I have never setup an SFTP host, before, so I'm curious what you all would recommend.

Hythloth
  • 235
  • 2
  • 7

8 Answers8

7

I found the permissions model discontinuities between CopSSH, Cygwin, and Windows/NTFS to be a colossal headache to keep straight. It was three ACL layers that needed to line up, as I recall. And it was very sensitive to .dll versions. This was several years / jobs ago, perhaps it's been improved. For me it was a case of things being "free only if your time is worth nothing"... even when it was my paycheck that saw the benefit from the time spent fighting the software.

These days I spend the $100/Box for WinSSHD from BitVise, which has been solidly set-and-forget. I have no affiliation beyond being a happy customer; have a look at WinSSHD.

edit: WinsSSHD SFTP setup step-by-step

AndyN
  • 1,739
  • 12
  • 14
  • +1 for "free only if your time is worth nothing". so true with this kind of thing... days and days can disappear wrestling with these kinds of things – mblackwell8 Apr 30 '15 at 10:10
2

I tend to have chunks of the CgyWin distribution (http://www.cygwin.com/) installed and have SSH+SFTP/SCP setup that way and gave found it to be reliable for this purpose under Windows 2000/XP/2003/Vista/2008*. It's SSH package is a complete port of the OpenSSH suit as found in most Linux distributions and many other Unix-a-likes (including BSD, where it originated).

Cygwin may be over-kill for you needs if all you need is SFTP though (I find it very useful to have a full Linux-a-like environment at my fingertips, but your description suggests that you do not need anything like that). copssh which you mention is actually based on the cygwin port of OpenSSH, my understanding it that it is simply the SSH parts and requirements pulled out of cygwin with nothing else, so should work just as well.

Long story short: I recommend you keep investigating copssh, unless you want some of the many other things that come with cygwin in which case investigate that instead.

[*] I had problems with exim via cygwin under 2008, though that was a while ago before 2008 was officially supported so that may be a resolved problem, but SSH with bash and all the usual command line tools I use have worked flawlessly.

David Spillett
  • 22,534
  • 42
  • 66
1

You can try SFTPPlus Server. It works on Windows but also Linux and Unix. It comes with a web based administrative tool to configure SFTP / SCP protocols and accounts.

In the same time it provides support for FTPS (explicit and implict) and HTTP / HTTPS, so you can access the same files over multiple protocols.

As commented before, the permissions in Cygwin are a big headache, this is why I recommend a native server.

I am one of the people who develop SFTPPlus

Adi Roiban
  • 793
  • 3
  • 7
  • 12
0

Cerberus FTP Server 4 now supports SFTP on Windows (as well as FTPS). It's a quick install and they have extensive help documentation available online. Other than adding an SFTP interface in the GUI there isn't any other setup required to make SFTP work. Version 4.0 is still in BETA but I've used it extensively and found it to be very stable.

The download is available here and the setup tutorial is available on their website.

Grant
  • 51
  • 2
0

CompleteFTP is an SFTP and FTP/FTPS server for Windows you might like to consider. It also supports HTTP and HTTPS. Disclosure: I am one of the developers of CompleteFTP.

0

Microsoft recently released its own build of OpenSSH for Windows (Releases and Downloads).

It does not have a dependency on Cygwin or anything else and it's quite lightweight (comparing to Cygwin).

I have prepared a guide for setting up SSH/SFTP server on Windows using this Microsoft build of OpenSSH.


Other than that I have a good experience with Bitvise SSH server (they have a free edition for a personal use).


Copssh is a dead project.

Martin Prikryl
  • 7,327
  • 2
  • 36
  • 71
0

If easy administration is a goal you can try following options

Rebex Tiny SFTP server

  • A standalone windows application
  • Unzip and run.
  • Single user, single folder.
  • Configuration via editing config file (looks similar to web.config).
  • Free for everyone.
  • Source code is included, can be extended.

Buru SFTP Server

Lightweight SFTP server for Windows. Installation is like:

' unzip the package and run
buru user add myuser --password mypassword --rootdir c:\data
buru run
  • can run as a service
  • unlimited users
  • free for non-commercial use

List of SFTP servers for Windows

There is a list SFTP servers list sftp.net/servers. Check it out and choose your own. Disclaimer: I'm one of maintainers of sftp.net site and I'm also involved in developing Rebex Tiny Server and BuruServer.

Martin Vobr
  • 1,313
  • 1
  • 8
  • 11
-3

Try looking at filezilla server. http://filezilla-project.org/download.php?type=server Same guys that make the very, very popular FTP/SFTP client make a server for windows.

Brian
  • 1,213
  • 2
  • 14
  • 24
  • 1
    I have investigated this project as a potential SFTP server, but unfortunately the FileZilla server does not currently support SFTP, this is only included in the client. – Loftx Nov 14 '11 at 16:41