Page 1 of 1

I have seen multiple logs

Posted: Tue Mar 26, 2019 3:11 am
by michaleben123
HI All,

I have seen multiple logs for denied on sftp domain, How we can restrict traffic flow on ftp server

02] Tue, 17 Apr 2018 00:08:01 (4561772) Failed to exchange the keys.
[02] Tue, 17 Apr 2018 00:08:01 (4561772) Closed session, disconnected from DMZ IP
[02] Tue, 17 Apr 2018 00:10:25 (4561783) Connected from DMZ2 IP (local address Listen IP, port 22)
[02] Tue, 17 Apr 2018 00:10:25 (4561783) Failed to exchange the keys.
[02] Tue, 17 Apr 2018 00:10:26 (4561783) Closed session, disconnected from DMZ2 IP
[02] Tue, 17 Apr 2018 00:11:01 (4561786) Connected from DMZ IP (local address Listen IP, port 22)
[02] Tue, 17 Apr 2018 00:11:01 (4561786) Failed to exchange the keys.
[02] Tue, 17 Apr 2018 00:11:01 (4561786) Closed session, disconnected from DMZ IP

Re: I have seen multiple logs

Posted: Wed Mar 27, 2019 8:43 am
by FTP
From your server logs, it seems SFTP connection failed on the ssh key exchanging. If you are using an old SFTP client software, please have a look at this KB article first: https://bbs.wftpserver.com/viewtopic.php?t=3547