Navigation: Server > Settings > General Settings > Security |

Configure the security-related settings here.

Enable FIPS 140-2 Mode

When this option is enabled, Wing FTP Server will run all the cryptographic operations according to the FIPS 140-2 standard.

Disable TLSv1.0/TLSv1.1

When this option is enabled, Wing FTP Server will run with the protocol TLSv1.2 only.

Restrict a web session to a single IP address

This option is enabled by default, it will restrict a web session to a single IP address when the client IP changes, the web session will also expire. When the client IP changes frequently, you may consider to disable it.

OpenSSL Cipher Suites

You can use the customized OpenSSL ciphers to configure the Cipher Suite that is permitted to negotiate in the SSL handshake phase by the client. You usually just need to use the default OpenSSL ciphers.

If you need a strong cipher suites, maybe you can have a look at this KB article: https://bbs.wftpserver.com/viewtopic.php?f=5&t=2936

SFTP Key Exchange Algorithms

The allowed SFTP Key Exchange Algorithms.

SFTP Encryption Algorithms

The allowed SFTP Encryption Algorithms.

SFTP MAC Algorithms

The allowed SFTP MAC Algorithms.

SFTP Host Key Algorithms

The allowed SFTP Host Key Algorithms.