View source for 5 0 0:Disabling unsecure transport modes

<noinclude><div class="noprint"><languages />
{{Copyright}}

{{Release-Apollon}}<br /></div>

=={{anchor|overview}}<translate><!--T:4--> Overview== </translate>
<div class="boilerplate metadata" id="Additional resources" style="background-color: #f0f0f0; color:#636f73; border: 1px ridge #cdd3db; margin: 0.5em; padding: 0.5em; float: right; width: 35%; "><center><b><translate><!--T:5--> Additional resources</translate></b></center>

{|style="margin: auto; margin-bottom:1em; width:100%; border:0px solid grey;"
| rowspan="2" style="padding:0px 10px 0px;" | [[File:SEP_next.png|45px|link=Special:MyLanguage/Configuring_SSL_Secured_Communication_for_SEP_sesam_Backup_Network|Configuring SSL Secured Communication for SEP sesam Backup Network]]
| style="padding:0px 40px 0px 10px; color: grey; font-size: 90%; text-align:left;" |<translate><!--T:6--> See also: [[Special:MyLanguage/Configuring_SSL_Secured_Communication_for_SEP_sesam_Backup_Network|Configuring SSL Secured Communication for SEP sesam Backup Network]] - [[Special:MyLanguage/Ransomware_Protection_Best_Practices|Ransomware Protection Best Practices]] – [[Special:MyLanguage/Backup_Strategy_Best_Practices|Backup Strategy Best Practices]]</translate>
|}

{|style="margin: auto; margin-bottom:1em; width:100%; border:0px solid grey;"
| rowspan="2" style="padding:0px 10px 0px;" | [[File:SEP Tip.png|45px|link=Special:MyLanguage/FAQ|FAQ]]
| style="padding:0px 40px 0px 10px; color: grey; font-size: 90%; text-align:left;" |<translate><!--T:7--> Check [[Special:MyLanguage/FAQ|FAQ]] to find the answers to most common questions.</translate>
|}

{|style="margin: auto; margin-bottom:1em; width:100%; border:0px solid grey;"
| rowspan="2" style="padding:0px 10px 0px;" | [[File:SEP Troubleshooting.png|45px|link=Troubleshooting_Guide]]
| style="padding:0px 40px 0px 10px; color: grey; font-size: 90%; text-align:left;" |<translate><!--T:8--> Problems? Check the [[Special:MyLanguage/Troubleshooting_Guide|Troubleshooting Guide]].</translate>
|}</div></noinclude>

<translate><!--T:35-->
To protect your data traffic against theft and other threats it is highly recommended to use the HTTPS protocol for transferring data over the network.

<!--T:36-->
SEP sesam now supports HTTPS protocol for all control commands and network traffic. The HTTP and FTP interfaces can be switched off and all data traffic is performed over HTTPS interfaces.

<!--T:37-->
Before you can disable HTTP and FTP interfaces, make sure to check existing tasks and events (backups, restores or migrations) and move them to HTTPS interfaces if necessary. You cannot remove an interface that is still in use.</translate>

{{note|<translate><!--T:39--> On Windows systems with a CPU that does not support AVX, the Sesam Transfer Protocol Server (STPD) automatically disables the HTTPS port. Consequently, the TLS key and certificate cannot be created. For more information refer to [[Special:MyLanguage/Release_Notes_5.0.0_Jaglion#Known_issues_and_limitations|Known issues and limitations in version 5.0.0 ''Jaglion'']].</translate>}}

<translate><!--T:40-->
==Deactivating the unsecure interfaces==
To deactivate the HTTP and FTP interfaces and move the traffic to HTTPS, you need to disable the ports on the SEP sesam Server and all RDS and then remove the interfaces in SEP sesam configuration.

===Disable the HTTP and FTP ports=== <!--T:41--></translate>

<ol><li><translate><!--T:14--> Locate the <tt>''<sesam_var>''/ini/stpd.ini</tt> file on the SEP sesam Server and on each RDS. </translate></li>
<li><translate><!--T:15--> Open the <tt>stpd.ini</tt> file using a text editor and comment out the unsecure ports (add the '''#''' symbol at the beggining of the row):</translate>
<pre>
[STPD_Server]
# STPD_PORT=11001
# STPD_HTTP_PORT=11000
STPD_HTTPS_PORT=11443
</pre>
<translate><!--T:16--> Only HTTPS port 11443 remains active.</translate></li>
<li><translate><!--T:17--> Save your changes and restart the server for the changes to take effect.</translate></li></ol>

===<translate><!--T:18--> Remove the HTTP and FTP interfaces</translate>===
<translate><!--T:19--> On SEP sesam Server and all RDS you can remove all unsecure interfaces that use HTTP or FTP protocols.</translate>
<ol><li><translate><!--T:20--> In the '''Main selection''' -> '''Components''' -> '''Topology''', locate and right-click your SEP sesam Server and select '''Properties'''.</translate></li>
<li><translate><!--T:21--> In the list of configured interfaces delete the unsecure interfaces you no longer want to use.</translate><br />
<translate><!--T:22--> [[image:HTTP_remove_interface.jpg|700px]]</translate></li>
<li><translate><!--T:23--> Click '''Apply''' to save the changes.</translate></li>
<li><translate><!--T:24--> Repeat this procedure also for all RDS as required.</translate></li></ol>

<translate><!--T:25-->
If an existing task or event (backup, restore or migration) still uses the interface you want to remove, a warning is displayed and SEP sesam does not delete the interface.

<!--T:26-->
[[image:HTTP_remove_interface-Warning.jpg|700px]]

<!--T:27-->
In this case find the task or event using this interface and switch it to a secure interface. You can also empty the '''Interface''' field (select blank value) to use any of available interfaces configured on the SEP sesam Server. 

<!--T:28-->
[[image:HTTP_remove_interface_task.jpg|700px]]</translate>

==<translate><!--T:29--> Setting HTTPS as default when aborting active data transfer</translate>==

<translate><!--T:30--> By default, SEP sesam always aborts data transfer (backup, restore, migration) over FTP. When you disable the port 11001, which is used for FTP traffic, these commands no longer work. You can set a global variable to use the HTTPS transport mode to abort an active data transfer.</translate>

<ol><li><translate><!--T:31--> In the menu bar, click '''Configuration''' -> '''Defaults''' -> '''Settings'''.</translate></li>
<li><translate><!--T:32-->
Click '''[+]''' to add the following key to the global settings (or modify the key value, if it already exists): <tt>gv_conf_use_com_stpd_kill|https|sesam</tt>
where ''value=https'' means that the HTTPS protocol is used for aborting active data transfers and ''sesam'' is the user name.</translate><br />
<translate><!--T:33--> [[image:HTTPS_set_variable.jpg|550px]]</translate></li></ol>

<noinclude><div class="noprint">
<translate><!--T:34-->
== See also==
[[Special:MyLanguage/Configuring_SSL_Secured_Communication_for_SEP_sesam_Backup_Network|Configuring SSL Secured Communication for SEP sesam Backup Network]] - [[Special:MyLanguage/Ransomware_Protection_Best_Practices|Ransomware Protection Best Practices]] – [[Special:MyLanguage/Backup_Strategy_Best_Practices|Backup Strategy Best Practices]]</translate></div><noinclude>