Need opinions on file creation/transfer please

[ediguy]

Hi everyone,

I'm hoping to get some opinions on how to best implement the following process, just from a high level standpoint.

Essentially what is happening is a User logs onto web app and enters data (all done, no feedback needed here ). That data then needs to be extracted and a disk file created that will be processed by another server.

Here's some of the parameters:

1) The web server is inside our domain
2) The destination server is inside the domain
3) It's a Windows domain

My thoughts were to run through the data entry fields and create the disk file directly on the destination server temporarily using impersonation in the back end code to establish the server disk access and handle the file then close the connection and move on.

I'm being told no for this method. "we're not going to establish this share because it's not secure. You have to use FTP to do this"

I need opinions on why this isn't secure, and what alternative methods could be used. I'm looking for pros and cons of my suggested method, pros and cons of FTP, and pros and cons of any other suggestions.

I'm perplexed by the requested logic though honestly.

[gep13]

Hello,

FTP, unless you are using SFTP, is inherently insecure. So that is good reason enough to not use it.

Is there a Web Server running on the other server? Is it possible to put a Web Service on there that would do the work of writing to disk? Failing that, what about WCF running in a Windows Service? That could create an endpoint, which could be fully secured, that would do the work required.

Gary