Global - Connections

Top  Previous  Next

Based on the nature of some Jobs, Tasks or Notifications, a connection is an essential part of the setting for that entity.

 

Connections are viewed and updated in the Server -> Connections window. The connections may also be managed by Add/Edit Job -> Tasks -> Add/Edit -> Task type. Connections are global, thus if you change a connection definition, this will affect all entities using this connection.

 

Main settings tab

 

clip0016

 

Protocol type

VisualCron is able to connect using regular FTP and FTPS (with implicit and explicit encryption). Regular FTP offer no security and information is not encrypted. VisualCron supports both SSL 3.0 and TLS (SSL 3.1). SSL and TLS are protocols layered above connection protocols (such as TCP/IP) but beneath application protocols (such as FTP) that provide encrypted, authenticated communications between a client and a server.

 

"Implicit SSL" versus "explicit SSL" (per RFC 2228)

Connecting securely and authenticating are two distinct methods of establishing a secure connection with a FTP server. In the first case, the Secure FTP server may first require a SSL connection to be established, before the initial welcome message is sent. This is called an implicit SSL connection. In the second case, the connection is established in clear text and a special FTP command must be sent to the Secure FTP server to change the connection into a secure connection. This is called an explicit SSL connection.

 

In most cases, FTP servers that support SSL authentication will accept a normal connection on port 21. Once the connection is established, it is necessary to authenticate before logging in, using the Authenticate method. When explicitly securing the connection, it is also possible to secure data connections using the overload of the Authenticate method which requires a DataChannelProtection ENUM as a parameter.

 

Servers that require an implicit SSL connection usually listen on port 990 rather than 21.

 

"SFTP"

SFTP (SSH File Transfer Protocol, often called Secure File Transfer Protocol) is a protocol that lets you transfer files securely over SSH connection. SFTP is not compatible with FTP (File Transfer Protocol), which has it's own security enhancements such as FTPS, FTP over SSL. SFTP is built on top of SSH connection. SSH supports various authentication schemes such as password-based and public key. Public key authentication requires a private key which can be linked to from the Security tab. The VisualCron implementation supports 3-5 of SFTP protocol (versions 1, 2 are outdated and not used anywhere). Default port for SFTP is 22.

 

Name

This is a descriptive name of the connection to distinguish from other connections.

 

Address

This is the host address to the server. It could be a DNS name or IP number.

 

Port

This is the remote connection port. Default port for regular FTP is 21. Default port for Implicit FTPS is 990.

 

Timeout

Sets the timeout for the operation.

 

Security tab

 

clip0017

 

Authentication type

Authentication type can either by password or public key. For the FTP protocol only password authentication is available. When using SFTP together with public key authentication you have to specify a path to a private key file.

 

Anonymous login

If your connection does not require a username and password this box should be checked.

 

Username

The username for the connection.

 

Password

The password for the connection.

 

Certificates tab

For the FTP SSL/TLS connection types, an extra Certificates tab is provided.

 

clip0186

 

Client certificates

Client certificates can be sent to the FTP server when connecting (implicit SSL) or when authenticating (explicit SSL). If the client certificate should be rejected by the server, an exception will be issued and the Task can not continue.

 

To add a client certificate, you need to click on Server -> Certificates. VisualCron is able to store certificates within itself. These certificates can be created by VisualCron or imported from other source. When you have create a Certificate you need to select it in the list of Certificates in the Certificates tab of the Connection properties.

 

Server certificates

The certificate that is received from the FTP server is verified against the VerificationFlags provided at connection or authentication. By default, if a certificate received from an FTP server contains anomalies, it will be rejected. If no anomalies are detected, it will be accepted. This behavior can be overridden by checking the Auto-accept server certificates checkbox. If not checked and a certificate anomaly is detected, a popup will be shown (if the client is logged in). The popup message will show why the server certificate was initially connected. You can choose to "Accept" or "Deny" the certificate. If accepted, it will be saved and you will not be asked again unless the server certificate has changed.

 

Proxy tab

Proxy servers allow a client to make indirect network connections. The client connects to the proxy, makes a request for a connection, file, etc. The proxy server then provides this resource by getting it from the requested address or by retrieving it from its cache. The advantages of using a proxy server can include filtering, connection sharing, increased speed and decreased bandwidth use. HTTP proxy servers are web servers that relay requests from a client to an external FTP server.

 

clip0018

 

Proxy type

The FTP implementation supports the HTTP proxy type and the SFTP implementation supports the SOCKS4 and SOCKS5 proxy types.

 

Address

Host name or IP number of the proxy server.

 

Port

Port of the proxy server.

 

Username

A username to access the proxy server.

 

Password

A password to access the proxy server.

 

Extra settings tab

This tab is not applicable for the email related (SMTP, POP3 and IMAP4) or SQL connection types.

 

clip0019

 

Data connection type

This value is indicating if the FTP client should initiate the data connection rather than the FTP server.

 

If set to PASV, the PASV command will be sent to the FTP server rather than the PORT command. This results in that the FTP server will listen on a data port (other than its default) and wait for a data connection to be established by the FTP client. The reply to the PASV command includes the host and port address the FTP server is listening on.

 

If set to PORT, the PORT command will be sent and the FTP client will listen for an incoming data connection.

 

The FTP server will establish the data connection upon receipt of a transfer command.

 

Note: If you are having problems with connecting or sending/receiving files to/from a server, try the PASV setting.

 

Log tab

The Log tab provides features to debug/trace the connection.

This tab is not applicable for the email related (SMTP, POP3 and IMAP4) or SQL connection types.

 

clip0020

 

Log outgoing messages to Task output

All messages sent from VisualCron to the FTP server is logged and stored in the Task output.

 

Log incoming messages to Task output

All messages received from VisualCron to the FTP server is logged and stored in the Task output.

 

SQL connection type

When the Server -> Connections -> Add -> SQL option is selected, a SQL connection wizard is started. See chapter SQL Explorer for details.