Maihunter789

• Crushftp Enterprise Level 1
• Crushftp Enterprise Training

CrushFTP Enterprise is a powerful file server supporting nearly all protocols. It does FTP, SFTP (SSH FTP), SCP, FTPS/FTPES (FTP over SSL), HTTP, HTTPS, WebDAV, and WebDAV SSL. Using CrushClient you can manage your files, upload and download files to your device from a CrushFTP server. File transfer and file management with CrushFTP servers. Use application to get the most out of your CrushFTP server directly from your iPhone/iPad.

Crushftp Enterprise Level 1

CrushFTP is a proprietary multi-protocol, multi-platform file transfer server originally developed in 1999. CrushFTP is shareware with a tiered pricing model. It is targeted at home users on up to enterprise users.

Features[edit]

CrushFTP supports the following protocols: FTP, FTPS, SFTP, HTTP, HTTPS, WebDAV and WebDAV SSL. Additionally, although not a protocol, it has both AJAX/HTML5 and Java applet web interfaces for end users to manage their files from a web browser. CrushFTP uses a GUI for administration, but also installs as a daemon on Mac OS X, Linux, Unix, and as a service in Windows. It supports multihoming, multiple websites with distinct branding, hot configuration changes, Attachment redirection, and GUI-based management of users and groups from a browser. Plugins are included for authentication against SQL databases, LDAP, Active Directory, and other custom methods. All settings are stored in XML files that can be edited directly, or with the web UI. If edited directly, CrushFTP notices the modification timestamp change and load the settings immediately without needing a server restart.

History of CrushFTP[edit]

CrushFTP was first published publicly around 1998.^[1] Initial versions were FTP only. There were no connection restrictions in version 1.x. CrushFTP 2.x brought about virtual directories in a sense, while CrushFTP 3.x ^[2] brought about a full virtual file system. It supported the ability to merge and mangle several file systems together regardless if they were from local folders, or another FTP site. It could even act as a proxy for other FTP servers. However the complications from all the potential issues that could go on from this was confusing. CrushFTP 3 introduced tiered pricing models.

CrushFTP 4 focused primarily on a cleaner interface and less confusing virtual file system. While it still seems to have some support for merging FTP sites with a local file system,^[3] the support seems limited. Updates in version 4 included a full HTTP server as well as the other supported protocols. Later updates began recognizing connection differences between web browsers and FTP/SFTP clients, counting four web browser connections as only one user against the licensed limit.

^[4] CrushFTP 5 continued the evolution of the WebInterface with various iterations. It used a ^[5] flash interface briefly before replacing it with a HTML/AJAX interface. CrushFTPv5 was the last version to still use a thick client Java Swing UI.^[6] Version 6 moved to an all web browser UI.

^[7] CrushFTP 6 released in 2012 brought about major changes as the management and monitoring interface became entirely web based. Its interface is based on jQuery and jQuery UI. Multiple administrators can work concurrently, fixing the single admin limitation of prior versions. It had image thumbnail support^[8] and file replication and synching.

Crushftp Enterprise Training

CrushFTP 7 was released in early 2014. According to the 'what's new' page^[9] it adds a dashboard for server information, delegated role based administration, graphical job / event designer, MP4 movie streaming support using HTML5,^[10] UPnP / PMP port forwarding and automatic external port validation testing, among many other features. Some features are available only to enterprise customers such as user synchronization and DMZ prefs synchronization between internal servers.

CrushFTP 8 was released in late 2016. The 'what's new' page lists a new faster HTML5 browser uploading system (4x faster) with resume support, a limited filesystem server mode, and data replication as key new features. There is a revision system on files, a new reports UI, and a stand-alone client UI as part of the release as well.^[11]

CrushFTP 9 was released in late 2018. The 'what's new' page lists a new CrushBalance load balancer, new Citrix protocol for VFS, uses less threads, [Let's Encrypt] plugin support, automated expiration reminder emails for passwords, accounts, and shares. Additionally it lists Proxy Protocol v2 support for AWS load balancers, and an enhanced Job management system.^[12]

Features[edit]

• DMZ feature to separate Internal and external server interfaces.
• High availability, session replication, data replication and VIP capabilities.
• Event based actions to trigger emails.
• Job scheduler, visual flow designer, manage and move files across protocols. Pass a list of found files from one step to the next, filtering items out, multithreading multiple steps simultaneously, and monitoring in realtime the progress of the job visually and with realtime logging.^[13]
• Scriptable command line CrushClient with support for FTP(ES)/ SFTP/ HTTP(s)^[14]
• CrushBalance load balancer included for a software based load balancer that can be put in front of the main CrushFTP server.
• Supports many back end protocols for file storage, including FTP(ES), SMB, SFTP, HTTP(s), WebDAV, Google Drive, Azure, Hadoop and S3^[15]
• WebInterface allowing on the fly zipped uploads and downloads
• WebInterface supports image thumbnail generation for live image previews ^[16]
• Drill down into folders on the WebInterface, delete, or rename.
• API for configuring users and VFS items over HTTP(s) ^[17]
• Custom usage reports that can be run on demand, or scheduled.
• Live realtime dashboard UI for monitoring server health, active users, and their activity.
• Web server supports Server Side Includes, and virtual domains.
• SQL integration to store users and permissions in SQL database tables.
• LDAP / Active Directory authentication integration.
• SAML SSO authentication integration.
• Radius authentication integration.
• Ability to launch custom shell scripts passing in arguments.
• DDOS protection
• Detailed audit logging and log rolling. Syslog or DB logging for a secondary server with replicated log data (audit purposes)
• Custom web upload forms for collecting additional information with file uploads which can be passed to jobs and events.
• Bandwidth limiters.
• Internal statistic gathering.
• User and group inheritance on a per setting level.
• Max login time, idle time.
• Max upload, download, and minimum download speed.
• Quotas and ratios.
• Max download amount per session, day, or month.
• Auto account expirations.
• Restricted IP ranges for connections.
• Custom events including running a plugin or sending an email.
• Supports various encodings including UTF-8.
• Can do Virtual File System (VFS) linking to merge several file systems.
• Supports FTP's MODE Z for compressed transfers.

Plugins[edit]

• CrushLDAPGroup authenticates against an LDAP servers, including Active Directory.
• CrushTask has a long list of tasks it can perform. AS2, Copy, Delete, Email, Execute, Find, Jump, HTTP, MakeDirectory, Move, PGP, PopImap, Preview, Rename, SQL, Unzip, Wait, WriteFile, Zip and an unknown Custom task.
• MagicDirectory allows creating users by just making a folder. Non administrator type personnel can create users easily.

Authentication options[edit]

• Built-in user database consisting of XML files describing the user and Virtual File System access.
• Active Directory / LDAP
• Web Application POST and retrieval of Xml configurations
• SAML
• SQL tables
• HTTP Basic Authentication
• HTTP Form Based Authentication
• MagicDirectory folder name based user authentication

Security[edit]

Encryption is supported for files 'at rest' using PGP, as well as for passwords using an MD5 or SHA, SHA512, SHA3, MD4 non-reversible hash. SFTP uses SSH for encryption, and FTPS uses SSL/TLS for encryption.^[18] SHA-2 hashing algorithms are supported. Hashes can be salted with random salt values.

As April 2018, there has been five published vulnerabilities in CrushFTP.^[19]

See also[edit]

References[edit]

1. ^http://www.crushftp.com/support.html
2. ^'Archived copy'. Archived from the original on 2015-02-11. Retrieved 2014-12-03.CS1 maint: archived copy as title (link)
3. ^https://groups.yahoo.com/neo/groups/crushftp3support/conversations/messages/2795
4. ^http://www.serverwatch.com/server-reviews/article.php/3854336/Getting-Started-With-CrushFTP.htm
5. ^'Archived copy'. Archived from the original on 2013-08-22. Retrieved 2014-12-03.CS1 maint: discouraged parameter (link) CS1 maint: archived copy as title (link)
6. ^'Archived copy'. Archived from the original on 2013-08-19. Retrieved 2014-12-03.CS1 maint: discouraged parameter (link) CS1 maint: archived copy as title (link)
7. ^http://www.macnn.com/articles/12/04/12/server.tech.gets.real.time.sync.multiple.admins/
8. ^http://www.techrepublic.com/blog/five-apps/five-cost-effective-and-easy-to-setup-ftp-servers-for-your-desktop/
9. ^http://www.crushftp.com/crush7wiki/Wiki.jsp?page=CrushFTP7New
10. ^http://www.macnn.com/articles/14/02/11/web.interface.gets.html5.video.zip.file.support/
11. ^http://www.crushftp.com/crush8wiki/Wiki.jsp?page=CrushFTP8New
12. ^http://www.crushftp.com/crush9wiki/Wiki.jsp?page=CrushFTP9New
13. ^http://www.crushftp.com/CrushFTP_White_Paper.pdf
14. ^http://www.crushftp.com/crush8wiki/Wiki.jsp?page=CrushClient
15. ^http://www.crushftp.com/crush8wiki/Wiki.jsp?page=VFS%20Protocols
16. ^http://anewdomain.net/2012/09/12/crushftp-6-enterprise-a-fast-ftp-server-with-lots-of-extras-review/
17. ^http://www.crushftp.com/crush8wiki/Wiki.jsp?page=API
18. ^https://www.digicert.com/sha-2-compatibility.htm
19. ^http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CrushFTP

External links[edit]

CrushFTP Enterprise is a powerful file server supporting nearly all protocols. It does FTP, SFTP (SSH FTP), SCP, FTPS/FTPES (FTP over SSL), HTTP, HTTPS, WebDAV, and WebDAV SSL.

Enterprise features:

• High Speed File Transfers (CrushTunnel): You can get accelerated transfers up to the speed your ISP limits you to, regardless of the latency or distance between connections. This can run stand along and allow FTP clients to tunnel through it, or integrated into the web browser with an applet.
• CrushFTPDrive: Users can connect directly from their machine with a native file server drive. They can work directly on files that are on the server. Transfers with the server can be accelerated automatically with the CrushTunnel feature. Simple integration on OSX and all versions of Windows XP and above.
• Job Scheduler: This allows you to schedule when tasks will run such as copying files from a remote server and encrypting them, then transferring them to another server.
• CrushTask Conditional Processing: You can branch to different actions based on custom criteria. You can call another task to have it perform common actions and then return and continue on.
• CrushTask Pop/IMAP: This allows you to monitor an email inbox and process incoming attachments in an automated way, routing them, encrypting them, etc.
• RADIUS Authentication: This allows you to process logins against a third party RADIUS server, such as two factor authentication with PhoneFactor.com.
• CrushSync: This allows for an agent to be installed on desktop computers keeping local folders in realtime sync with other desktop machines. A change made anythwere will be replicated across all subscribers with that folder.
• Internal Sharing: Users can grant access to their folders to other internal users of the server. The newly granted folder just shows up in the user's 'Shares' folder.
• Emergency support with access to support personnel 24x7. If the server is down for any reason, immediate help is one phone call away.

Besides the enterprise only features, there are many other features that make CrushFTP stand out:

• The built in fully customizable WebInterface allows you to present a website to customers so they can easily upload files to you, or download files from you. It has support for drag and drop uploading on the website, as well as the ability to upload folders while zipping them on the fly. This saves time and bandwidth. You get real-time feedback on the upload progress, speeds, and estimated time remaining. The WebInterface allows searching for files, thumbnails of images, slideshows, and managing your CrushSync client.
• Easily setup emails to come to you when a user uploads a file. Did the user upload 50 files? Don't want 50 emails? Not a problem. CrushFTP will build one email with all 50 items listed in it... even if they used a client that logged in with 10 connections to do the uploads!
• CrushFTP is easy to configure. You can drag and drop folders on a user to grant them access to the folder. The user will then only be able to access that folder. Not like OS X where they can browse around outside their home folder.
• The plugin support for CrushFTP allows for a whole new set of expandable features. One example allows you to make users by 'creating a folder'. That's all. You create a folder with a specific name, and a user with that name can then login with access to only that folder. You can't get any easier than that.
• Scared about giving users access to your computer? You can 'preview' what the user will see with the user manager. You can control the access to every file or folder so there is no confusion on what a user can or can't do. Once a user has logged in, you can monitor what they are doing with the CrushFTP interface. See which directories they access, what files they download, and upload.
• Free training videos showcasing various features of CrushFTP are available on CrushFTP's homepage. Additionally, should you have questions or concerns, you have email access to support who will respond to questions very quickly.