I'm actually working in a medium sized company with security concerns. Let me explain you my problem :
- My office has one single internet line.
- This line is accessed by anyone in the office over WIFI.
- My server use the same line in LAN, this server needs to send periodically important information to a distant server via FTP.
The problem / threat:
I’m afraid that a potential hacker could sniff my FTP credential and use them again to alter or get important information. I’m aware that the FTP protocol is unsecure because the credentials are sent in plain text over the network/internet but I cannot change the protocol the servers are using at the moment. I know that SFTP or FTPS would be a better way to encrypt the data/credentials.
So anyone using the office WIFI would be able to sniff the credential using a tool like Wireshark?
Open a second internet line dedicated only for the people in the office using WIFI. The first line would be EXCLUSIVELY dedicated to our system/server to discuss with our remote server via FTP. So both networks would be separated.
Maybe install a hardware / firewall on our internet line to secure, protect from sniffing. But I honestly don’t know if this kind of router/firewall can make the job and protect us from sniffers?
So here are my questions:
- First of all, did I say anything that doesn’t make sense?
- What would be the easiest solution to avoid those sniffers to get my credentials?
Thank you in advance for any advice.