Embedded Servers—FTP Server

Use the Embedded Servers tab and the FTP tab to edit embedded FTP server properties. How?

Note:

For information about the sFTP tab, see Embedded Servers—sFTP Server.

Oracle Managed File Transfer includes built-in FTP and sFTP servers, which handle many of the types of file transfers performed. To transfer a file using one of the embedded servers, copy the file into one of the embedded server directories.

sFTP and FTPS embedded servers are supported in FIPS mode.

The Embedded Servers tab and the FTP subtab are arranged in the following sections:

General Actions and Configuration

The General Actions and Configuration section of the Embedded Servers tab allows you to save all embedded server properties and edit general properties.

Element	Description
Restart All	Restarts the FTP and sFTP servers.
Root Directory	Specifies the root directory of the FTP server. The default is `Domain_home/mft/ftp_root`. You must set it to a shared location if multiple Oracle WebLogic Server instances run in a cluster. If you change the root directory, you must move the directories and files under the root and restart the Oracle WebLogic Server managed server(s) dedicated to Oracle Managed File Transfer. See Embedded Servers—Ports for how to restart these servers.
Enabled	Enables the FTP server if checked. The default is enabled (checked).
Start	Starts the FTP server. This button is grayed out if the server is running.
Stop	Stops the FTP server. This button is grayed out if the server is stopped.
Restart	Restarts the FTP server. This button is grayed out if the server is stopped.
Refresh	Refreshes the FTP server property values.
Save	Saves FTP server property changes. Remember to save before closing this tab. Changes are activated when you Restart the embedded server.
Revert	Reverts all changes since the last save.

General Properties

The General Properties section of the Embedded Servers tab and the FTP subtab allows you to edit properties specific to the FTP server.

Element	Description
Maximum Logins	Specifies the maximum number of concurrent users. The default is 10.
Maximum Login Failures	Specifies the maximum number of login failures after which a connection is closed. The default is 3.
Maximum Concurrent Requests	Specifies the maximum number of concurrent requests the FTP server can accept. The default is 10.
Idle Timeout	Specifies the time in seconds that the server can be idle before the connection ends and the user must log in again. The default is 600, equivalent to 10 minutes.

Security

The Security Properties section of the Embedded Servers tab and the FTP subtab allows you to edit FTP security properties.

Element	Description
Plain FTP	Enables plain FTP, without Implicit or Explicit SSL support, on the FTP server. You can enable implicit or explicit SSL support, or both, in addition to plain FTP. The default is enabled (checked).
Implicit	Requires the client to immediately challenge the FTPS server with a TLS/SSL `ClientHello` message. A non-FTPS aware client cannot connect to an implicit SSL-enabled server. The default is enabled (checked).
Explicit	Allows clients to explicitly request that the FTP server encrypt the session and mutually agree to an encryption method. This is known as explicit FTPS or FTPES. Explicit mode is legacy-compatible, so plain FTP clients can still connect to the FTP server. Common commands for invoking FTPS security include `AUTH TLS` and `AUTH SSL`. The default is enabled (checked).
Client Authentication	Specifies the level of client authentication: Need, Want, or None. Applies only if Implicit or Explicit is checked. Need - The FTP server's SSL engine requires client authentication during the handshake. Want - The FTP server's SSL engine requests client authentication during the handshake. None - No client authentication is performed (default).
Protocol	Specifies the security protocol: TLS (default) or SSL. Applies only if Implicit or Explicit is checked.
Cipher Suite	Specifies the cipher suites to use. To use all available cipher suites, check All. Checking none uses a default list. Applies only if Implicit or Explicit is checked.
Certificate Alias	Specifies the alias of the private SSL key file for authentication. See Keystores Management - Keystores Tab. A Certificate Alias is required when either Implicit or Explicit is checked.

Advanced Properties

The Advanced Properties section of the Embedded Servers tab and the FTP subtab allows you to edit FTP advanced properties.

Element	Description
Active Connection	In active mode, the client establishes the command channel. The server establishes the data channel between a server port in the range from Port Range Start to Port Range End and a client port that the client specifies using the `PORT` command.
Port Range Start	Specifies the lowest numbered port in the data channel range.
Port Range End	Specifies the highest numbered port in the data channel range.
Enable	Enables the FTP server if checked. The MFT server does not start a disabled FTP server during initialization. The default is disabled (unchecked).
IP Check	Finds out whether the IP address for the data connection is the same as for the control socket if checked. FTP uses two channels between client and server, which are separate TCP connections. The command channel is for commands and responses. The data channel is for transferring files. The default is disabled (unchecked).
Passive Data Connection	In passive mode, the client establishes both the command and data channels. The server tells the client which port in the range from Port Range Start to Port Range End to use for the data channel.
Port Range Start	Specifies the lowest numbered port in the data channel range.
Port Range End	Specifies the highest numbered port in the data channel range.