FTP DLP Monitoring: Network DLP solutions can monitor FTP traffic through ICAP integration with a web proxy, or via network tap/span port. Endpoint DLP can also monitor FTP client applications directly.

FTP Test Instructions

To test FTP DLP, upload a file containing sensitive sample data to an FTP server. Follow these steps:

1

Download Sample Data

Download a sample file from the Sample Data page containing sensitive test data.

2

Use an FTP Client

Use an FTP client such as FileZilla, WinSCP, or the command line. Windows built-in FTP does not support passive mode.

3

Upload & Monitor

Upload the file and check your DLP console for incidents. The DLP should detect the sensitive content within the uploaded file.

FTP Server Configuration

If you need a test FTP endpoint, you can set up a temporary FTP server on your test network, or use the connection details below if configured:

# FTP Connection Details (configure these for your environment) Host: ftp.dlp.fortrafied.com Port: 21 Username: dlptest Password: (set during server configuration) Directory: /uploads/ # FileZilla Quick Connect # 1. Open FileZilla # 2. Enter the host, username, password # 3. Click "Quickconnect" # 4. Navigate to /uploads/ # 5. Upload your sample data file # Command Line FTP (Linux/Mac) ftp ftp.dlp.fortrafied.com # Enter username and password when prompted put sample-data.csv

FTP DLP Monitoring Methods

Network-Level Monitoring

  • ICAP integration with proxy/firewall
  • Network tap or SPAN port monitoring
  • Inline network DLP appliance
  • Can monitor all FTP traffic on the network
  • Does not require endpoint agents

Endpoint-Level Monitoring

  • Agent monitors FTP application activity
  • Can inspect files before transmission
  • Works with any FTP client
  • Can block at the source
  • Visible in endpoint DLP console