Network misconfigurations

Azure virtual machine allows direct FTP over SSL access from the Internet

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

The File Transfer Protocol (FTP) is a standard communication protocol used for the transfer of computer files from a server to a client on a computer network. The FTP over SSL port (21) is open on your virtual machine and allows all incoming traffic from the Internet. In order to keep security best practices, you should restrict access to be only from allowed IP addresses.
  • Recommended Mitigation

    Configure networking rule to allow incoming FTP over SSL traffic from allowed IP addresses only.