Threat Modeling Tool 2014 - modeling an FTP connection

What king of connection or Flow should I be using to model an FTP connection using the new Threat Modeling tool?
Thanks in advance.

Does anyone have an answer for this?
From MSDN forums.

Similar Messages

  • Best practice for modelling rediects using the threat modelling tool

    I'm in the process of modelling systems using the threat modelling tool.
    There services in question do a lot of redirecting and handing off to one another on the client side, including things like ACS and identify providers.
    If Web App A redirects to Web App B what is the best way to draw this?
    1) App A (process) > HTTPs redirect > browser > request > App B (process) or 
    2) Can I just model it as HTTPS from A to B?
    Obviously 2 simplifies diagrams hugely , but does that then exclude a range of potential threats or does the tool cater for this implicitly?

    Storing documents outside the web root and using
    <cfcontent> to push their contents to the users is the most
    secure method.
    Putting the documents in a subdirectory of the web root and
    securing that directory with an Application.cfm will only protect
    .cfm and .cfc files (as that's the only time that CF is involved in
    the request). That is, unless you configure CF to handle every
    request.
    The virtual directory is no safer than putting the documents
    in a subdirectory. The links to your documents are still going to
    look like:
    http://www.mysite.com/virtualdirectory/myfile.pdf
    Users won't need to log in to access these documents.
    <cfcontent> or configuring CF to handle every request
    is the only way to ensure users have to log in before accessing
    non-CF files. Unless you want to use web-server
    authentication.

  • Threat Model is not loading

    Problem loading threat model.
    Unfortunately, we were unable to load all the elements from this file. The following elements may be missing from your display, or be missing threats, mitigations, or certifications. Please check to see if the data is intact. If so, you are ok to save.
    Otherwise please report the issue at
    http://social.msdn.microsoft.com/Forums/en-US/sdlthreatmodeling/threads/
    You can copy this message to the clipboard by pressing Ctrl-C.
    (DataFlow) Application Data
    (DataFlow) Application
    Data
    (DataFlow) Command/Response
    (DataFlow) Commands/Responses 
    (DataFlow) Commands/Responses
    (DataFlow) Commands/Responses
    (DataFlow) Machine
    Deployments
    (DataFlow) Machine
    Deployments
    (DataFlow) Workflow Execution
    (DataStore) McQueen
    Configuration
    Data
    (Interactor) Avamar
    Data Protection System
    (Interactor) vCenter
    Endpoints
    (Process) vCAC
    (Process) vCO
    (User) Application Annie
    (McQueen end user)
    (User) Virtual Victor
    (McQueen
    Admin)
    OK  

    Hi,
    Do you talking about
    Threat Modeling Web Applications? If yes, please post the question to MSDN forum for
    Threat Model:
    https://social.msdn.microsoft.com/Forums/en-US/home?forum=sdltools%2Csdlprocess&filter=alltypes&sort=lastpostdesc
    PS: Here is a forum about Visio (A drawing program)
    Regards,
    George Zhao
    TechNet Community Support
    It's recommended to download and install
    Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
    programs.
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Compare Merge Model problems with models from different connections

    Hi all,
    I've experienced a problem while using the compare/merge model funcion under tools.
    Just to put in place:
    I've 4 model, one for each enviroment that I have: DEV, INT, TEST, PROD(*each model imported from different connections*). Because I haven't found any reliable way to keep them sincronyzed, using DLL deltas. Is there a way to do that?
    Anyway, regarding the main subject problem. Whem I try to sync for example, from PROD, to TEST, using compare/merge model function under tools, the process find the differences. When I selecte those that I want, and click on merge, the destination model TEST, get the selected objects merged into.
    But now, the model Schema, when I select sincronyze model with data dictionary to get de DLL delta, things get crazy, and the merged objects doesn't get detected to be created.
    If it's help, I think that the is with the associated import connection than the merged objects have. They have the PROD connection name, instead of the TEST connection name. Also when I try to syncronize the relational model againts de data dictionary(database), datamodeler ask me wich connection to use, PROD or TEST. When, before, merging, model, data modeler did not ask me anything.
    Why is data modeler doing this?
    What I have seen is when you import in a model things from different connections/models, when you try to sincronyze agains a connection, all objects that are not from the selected connection doesn't get compared.
    Is there a bug or a problem?
    How can I can keep a schema in different enviroments, sync? What are the step that I shoulf follow?
    Thanks in advance.
    Edited by: morfeo8marc on 14-mar-2012 11:17

    I shall try to explain what is happening here.
    When you import objects from TEST data dictionary, their source information (see Summary info in Properties dialog) will refer to TEST.
    The relational model for TEST will contain source information (see Summary info in Properties dialog) for the connection to TEST.
    Similarly, imported objects from PROD will refer to the PROD data dictionary, and the PROD relational model will hold connection details for PROD.
    If you merge PROD objects into the TEST model, they will retain their source information (i.e. referring to PROD).
    The TEST model will be updated to include connection details to PROD.
    When you synchronize a model, if it only has one source connection, it uses that.
    If it has more than one, it will prompt you to decide to which data dictionary it should synchronize.
    In your case, for the TEST data dictionary, it will synchronize all objects that have source information for TEST (i.e. those imported from TEST).
    It will also compare any new objects (i.e. those not imported from a data dictionary).
    It will not compare objects that were imported from a different data dictionary (e.g. PROD).
    This supports the scenario where a model consists of objects imported from more than one data dictionary, and where the data dictionaries are maintained separately.
    We may need to review the above strategy in light of your experience and development process.
    In the meantime, may I suggest that from your updated TEST model, you Import from Data Dictionary using the TEST connection.
    The resulting Compare Models dialog should show all objects (i.e. those from TEST and PROD).
    You may need to set the Swap Models option to generate DDL with which to update your TEST data dictionary.
    Thank you for raising this matter.
    Regards,
    Tony Rose

  • I can't get my Airport Express model A1084 to connect to my Actiontec M1424WR modem/router.  Help?

    I can't get my Airport Express model A1084 to connect to my modem/router model Actiontec M1424WR. The Airport utility on my IMAC says it doesn't find any base stations.  Thelight on the Airport Express blinks amber only.   Any suggestions?

    The  8+ year old Express that you have will require a 5.x version of AirPort Utility to administer the product.
    Might you have an older Mac running Leopard (10.5.x), Snow Leopard (10.6.x) or a PC with AirPort Utility installed on the computer?

  • Dreamweaver CS4 Search & Replace / FTP connectivity / ctrl + B, ctrl + c

    Hi all,
    CS4 Search and Replace / FTP connectivity ISSUES:
    I use Search and replace tools for some large replace operations on live websites.. However when searching and replacing.. Dreamweaver is constantly having to establish a connection between the server for each file I search and replace in.
    Programs like Pspad have this down to a T. Any chance we can have an update to make the search and replace is faster. It's utterly useless at the moment.
    Biggest problem is if the connection to the server fails whilst searching and replacing text in a document.. The file gets removed from the server.. I have lost now 3 website pages because of this. I edit files live because they are within a test environment.. I don't like working locally because I know programs like Pspad are capable of being extremely fast at editing live.
    Because of this issue, I have had to stop using dreamweaver CS4 for now..
    ctrl + B, ctrl + C ISSUES
    When pressing ctrl + b to add strong tags to text.. Sometimes it doesn't work and I have to goto the keyboard tag editor.. close it again.. Then it works again. So there's a bug there.
    And sometimes ctrl + c copies as if it does (ctrl + a, ctrl + c) ... And it stops once again when I goto keyboard tags and close it again..
    Explain that hehe!
    All the best and thanks in advance.

    jimmyt1988 wrote:
     Any chance we can have an update to make the search and replace is faster. It's utterly useless at the moment.
    This is a user-to-user forum, so no one here can grant your request. File an enhancement request through the official form at http://www.adobe.com/cfusion/mmform/index.cfm?name=wishform.

  • SSIS FTP connection Time out issue

    Hi,
    I have a package about 300MB downloading from a client's FTP out side of company,it was working for about 1 year , now I got time out error after 60% downloading.
    I can manually download the package thru IE , so I guess it's NOT the connection issue. When I check the FTP connection , I noticed an interesting thing :
     1> Time out range is 1-300, and 0 should mean NO TIME OUT , however, it seem whatever number I saved for TIme out , it's back to 60 sec (Default value)  --I tried both on VS 2008 R2 and VS 2012
     2> Package will be timed out after 5-6 minutes after the package start running
    3> Error message is : 
    Connection manager "FTP Connection Manager"     Description: An error occurred in the requested FTP operation. Detailed error description: Receiving file "XXX.zip".  The operation timed out  .  End Error 
    Error: 2014-05-16 14:29:26.34     Code: 0xC002918A     Source: Download zip file from PV FTP FTP Task     Description: Unable to receive files using "FTP Connection Manager".  End Error
    Had anyone seen this error before ?  Any one tried to set the time out as 0 with succeed ?
    Thank you all in advance !
    -Eva
    EW

    Hi Eva,
    It may occur due to the Firewall blocking. Please add Inbound and Outbound rules for Port 21, and program DtsDebugHost.exe and DTExec.exe.
    As a workaround, you can use FTP batch file instead of the SSIS FTP Task:
    http://www.dostips.com/DtTipsFtpBatchScript.php 
    http://www.robvanderwoude.com/ftp.php 
    Regards,
    Mike Yin
    TechNet Community Support

  • Transfering .csv file from SAP to NON-SAP using FTP connection

    Dear All,
    I am able to place the .CSV file successfully to other system using FTP connection, but when i open the file I could see the gaps between each record. I mean 1st line with the 1st record and 2nd line having a GAP and 3rd line with the 2nd record and so ..on as shown below
    1     1/1/2009     0     41000027
    2     1/1/2009     0     41000027
    3     1/1/2009     0     41000027
    I have declared an internal table as below
    TYPES: BEGIN OF ty_charlist,
             line(5000) type c,
           END OF ty_charlist.
    DATA:  w_charlist TYPE ty_charlist,
                 t_charlist TYPE TABLE OF ty_charlist.
    And concatenating each field seperated by ','
    CONCATENATE  res1 res2 res3 res4 res5 res6 res7 res8 res9 res10 res11 res12 res13 res14 res15 res16 res17 res18 res19  res20 res21 res22 res23 res24 res25 res26 res27 res28 res29 res30 res31 res32 res33 res34 res35 res36 res37 res38 res39
    INTO w_charlist-line SEPARATED BY ','.
    APPEND w_charlist TO t_charlist.
    Now T_CHARLIST contains 50 records which needs to be placed on other system. I can see 50 records but gap is coming
    Here res1, res2 and so on are declared as TYPE STRING..
    Please do help me this issue
    Thanks
    Prava

    Hello dprava ,
    Try to be assisted with these examples .
    1. [http://wiki.sdn.sap.com/wiki/display/ABAP/FTPfiletransferinBackground]
    2. [Reg: FTP Connection; - SAP examples programs
    Thank you,
    Boaz

  • Adding a site to a ftp connection

    Hi,
    Just upgraded to DW CS4 and in doing so I pressed a wrong
    button...!
    I have numerous sites in my site manager window and one I am
    working on has reverted to being nothing more than an ftp
    connection. This was my fault as I went back into the set-up window
    for the site (edit site) and made it an ftp connection only, rather
    than a full site with connections to local folders as well as
    remote connections.
    Problem is, now on the site manager list the icon has changed
    from the folder with the name of the site to the ftp//sitename here
    icon and I have no idea how to get it back so I have access to my
    local folder.
    Any help?
    Thanks,
    SunsV

    > Problem is, now on the site manager list the icon has
    changed from the folder
    > with the name of the site to the ftp//sitename here icon
    and I have no idea
    > how
    > to get it back so I have access to my local folder.
    There really isn't any way to go back from that choice.
    so- Make a New site definition and pick "site" and not "RDS"
    connection.
    Alan
    Adobe Community Expert, dreamweaver
    http://www.adobe.com/communities/experts/

  • Need help to Configure FTPS connection for File Sender Adapter

    Hi,
    I want to Configure, FTPS connection (Secured Connection) for File Sender Adapter. Could anyone please guide me, what Information I require to configure. I just want to know what Information should I request the team inorder the configure FTPS so that it can be deployed properly.
    I have checked with [SAP Help Link|http://help.sap.com/saphelp_nw04/helpdata/EN/e3/94007075cae04f930cc4c034e411e1/content.htm] and while configuring the communication channel found that I need Keystore and the X.509 Certificate and Private Key.  which needs to be deployed on the J2EE server by using the Visual Administrator.
    Is there anything else, I need to configure.
    Any help would be appreciated in this regard.
    Thanks & Regards,
    Varun.K

    The basic things are Certificate/Keys which you already know. Usually it is enough for running a sceanrio.
    However, if you have additional requirements, like FTPS for "Connection Security" for encryption, then you may need additional details like commands. Rest all settings are same as FTP.
    Regards,
    Prateek

  • How do I get SQL Agent to perform an FTP connection through a SSIS package?

    I have created a number of SSIS packages that I am running through SQL Agent in various jobs.  I have set up a Credential / Proxy for the job steps and for the most part everything runs no problem.  The issue I have is with the step where I make
    a connection to a FTP server and download files.  In BIDS the step works fine but in SQL Agent the step times out.  I presume that it has to do with the account that it is being run under but that is what I thought the Credential / Proxy was supposed
    to handle (as it does for all the other steps).  I am running on SQL Server 2008 R2.  I have created a test job that has only one step which is to connect to the FTP server and download some text files.  I have tried utilizing package configuration
    files and have tried various ProtectionLevels to no avail.
    Anyone have any thoughts or direction for me to take?  Will continue to research and will post if I resolve this.
    Thanks, Andrew

    On the dev environment the ProtectionLevel is set to EncryptSensitiveWithUserKey and that is what I tried first on the prod server.  Subsequently I also tried utilizing a package config file (with ProtectionLevel then of DontSaveSensitive) and have
    also tried working with the ServerStorage.
    For deployment I copied the relevant dtsx files to a solution on the prod server.  I verified that the packages all had tested connections in the Connection Manager.  I have run all the packages in the BIDS on the prod server and they all worked. 
    I have created a test package from scratch on the prod server to test the ftp connection.  This test package runs from BIDS fine.  I have set the SQL Agent file to access through the file system (no luck) and have saved the package to the SSIS Packages
    and had the job step access from there (no luck either).

  • How can I find out the server port for a secured FTP site and creating a FTP Connection Manager

    I have to create a FTP Task to go out and get the files that our 3rd party vendor will be dropping on a secured FTP site. I have all the credentials to access that Secured FTP Site and have successfully done so through FileZilla.
    Now I need to set-up a FTP Task to go out and get their files and in so doing create a FTP Connection Manager. Is there any way I can determine the
    Server Port number from the Secured FTP site? I let it default to 21 and tried the Test Connect and it failed.
    Thanks for your review and am hopeful for a reply.

    Hi ITBobbyP,
    SSIS has a built in FTP task, while this only works for the FTP protocol, it doesn’t support SFTP. But there are some free clients like WinSCP and
    SSIS SFTP Task Control Flow Component
    available in the CodePlex which can invoked from SSIS.
    References:
    SSIS SFTP Task Control Flow Component approach
    WinSCP approach
    Thanks,
    Katherine Xiong
    Katherine Xiong
    TechNet Community Support

  • FTP connection on mobile device works over wifi but fails over 3G

    Hi all,
    Hoping someone can help, or has come across this issue.
    I am developing a mobile app using flash builder 4.6 with the flex 4.6 sdk. My app needs to transfer files via ftp.
    The issue I am experiencing is that the ftp connection establishes and files transfer without a problem when connected via wifi, on both android and ios platforms.
    However, when only connecting via a 3G connection on a device, a problem occurs. While I can establish a connection, when I send the USER command, I never receive a response.
    A simple view with code to reproduce this issue is listed below. Has anyone come across this problem? I have been searching far and wide but cannot find anything related.
    Could this be an issue with Adobe Air or the socket class? I have written equivalent code using the android sdk in eclipse, and a connection to the same server and user details works on both wifi and 3g connections.
    Any help would be appreciated.
    Thanks.
    <?xml version="1.0" encoding="utf-8"?>
    <s:View xmlns:fx="http://ns.adobe.com/mxml/2009"
                        xmlns:s="library://ns.adobe.com/flex/spark" title="HomeView">
              <fx:Script>
                        <![CDATA[
                                  private var commands:Array;
                                  private var s:Socket;
                                  private var data_channel:Socket;
                                  private function connectToFtp():void
                                            var ftp_response:String;
                                            var data_response:String;
                                            var data_channel_ip:String;
                                            var data_channel_port:int;
                                            s = new Socket();
                                            s.addEventListener(Event.CLOSE, closeConnection);
                                            s.addEventListener(Event.CONNECT, connectionMade);
                                            s.addEventListener(IOErrorEvent.IO_ERROR, showError);
                                            s.addEventListener(SecurityErrorEvent.SECURITY_ERROR, showSecError);
                                            s.addEventListener(ProgressEvent.SOCKET_DATA, receiveReply);
                                            s.connect("mydomain.com", 21);
                                            function receiveReply(e:ProgressEvent):void{
                                                      ftp_response = s.readUTFBytes(s.bytesAvailable);
                                                      trace(ftp_response);
                                                      var code:String = ftp_response.substr(0, 3);
                                                      if (code == "220")
                                                                // connected.
                                                                // send user command
                                                                 s.writeUTFBytes("USER myUserName\n");
                                                                s.flush();
                                                      else if (code == "331")
                                                                // user command sent. password required
                                                                // send password
                                                                s.writeUTFBytes("PASS myPassword\n");
                                                                s.flush();
                                                      else if (code == "230")
                                                                // login successful
                                                                // change directory
                                                                s.writeUTFBytes("CWD /fibreSyncFtp/\n");
                                                                s.flush();
                                                      else if (code == "250")
                                                                // change directory successful
                                                                // send passive command
                                                                s.writeUTFBytes("PASV\n");
                                                                s.flush();
                                                      else if(code == "227")
                                                                //get the ip from the string response
                                                                var temp:String = ftp_response.substring(ftp_response.indexOf("(") + 1, ftp_response.indexOf(")"));
                                                                var data_channel_temp:Array = temp.split(",");
                                                                data_channel_ip = data_channel_temp.slice(0,4).join(".");
                                                                //calculate the port number from the last two digits - if this makes no sense, google
                                                                // FTP PROTOCOL - there are loads of guides that explain the server responses.
                                                                data_channel_port = parseInt(data_channel_temp[4]) * 256 + int(data_channel_temp[5]);
                                                                data_channel = new Socket(data_channel_ip, data_channel_port);
                                                                data_channel.addEventListener(ProgressEvent.SOCKET_DATA, receiveData);
                                                                s.writeUTFBytes("LIST\n");
                                                                s.flush();
                                                      else if (code == "125")
                                                                //use the new IP to open a second socket - this will transmit the data.
                                                                // Your first socket will transmit any commands you issue and this new socket will transmit the data
                                                      else if (code == "226")
                                                                // transfer complete
                                                                // close the connection
                                                                //s.close();
                                                      else if (code == "425")
                                                                // can't open connection
                                            function connectionMade(e:Event):void
                                                      trace("Connection Made");
                                            function receiveData(e:ProgressEvent):void{
                                                      data_response = data_channel.readUTFBytes(data_channel.bytesAvailable);
                                                      trace(data_response);
                                            function showError(e:IOErrorEvent):void{
                                                      trace(e.text);
                                            function showSecError(e:SecurityErrorEvent):void{
                                                      trace(e.text);
                                            function closeConnection(e:Event):void{
                                                      trace(e.type);
                        ]]>
              </fx:Script>
              <fx:Declarations>
                        <!-- Place non-visual elements (e.g., services, value objects) here -->
              </fx:Declarations>
              <s:Button top="10" label="FTP" click="connectToFtp()" horizontalCenter="0"/>
    </s:View>

    Probably you need to write your own AIR native extension, which uses the native Android sockets..I have the same problem and I'm just starting writing the extension...I guess there is no other way..At least you test with native android socket and you confirm is fine, so we know it should work

  • Background scheduling of FTP Connection through R/3

    Hello Friends,
      I have done FTP connection by using Z-pgm which uses function FTP_CONNECT. This is working fine in Foreground mode. 
    But in background scheduling of the z-pgm, i am getting the <b>error as 'RFC to program SAPFTP failed'.</b>
    I checked RFC destination SAPFTP in SM59. There Activation type is 'Start on Front End Work Station'. I tested the connection also. Its alright.
    How to do FTP processing in Background?
    Cheers,
    Seema

    Hello,
    you could try to use RFC destination 'SAPFTPA' - it's ftp on the application server. Since SAPFTP is  'Start on Front End Work Station' and in background there is no front end work station, it can't work.
    Regards Wolfgang

  • FTPs connection error:When using Variable substitution for Directory path

    Hi
    I am transferring data from BI to xml file via PI: Here a Client proxy from BI sends the data to PI and the PI FTPs the XML file to a remote location. For FTP I am using FTPs SSL connection.
    It was working fine untill I used Variable susbstitution to determine Directory path dynamically. I am using this because different xml files are intended to goto the different locations.
    I did the variable substitution like this:
    Target Message Structure:
    ---> Target Directory: %var1%
    <?xml version="1.0" encoding="UTF-8" ?>
    <MT_BI_EXTRACT_FILE>
      <Header>
         <Directory>/Customer</Directory>
    </Header>
    <Detail>
    </Detail>
       </MT_BI_EXTRACT_FILE>
    And in the variable substitution I am doing it this way
    payload:MT_BI_EXTRACT_FILE,1,Header,1,Directory,1
    And the error I am getting is:
    Attempt to process file failed with Error when getting an FTP connection from connection pool: com.sap.aii.af.service.util.concurrent.ResourcePoolException: Unable to create new pooled resource: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
    MP: Exception caught with cause com.sap.aii.af.ra.ms.api.RecoverableException: Error when getting an FTP connection from connection pool: com.sap.aii.af.service.util.concurrent.ResourcePoolException: Unable to create new pooled resource: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
    Exception caught by adapter framework: Error when getting an FTP connection from connection pool: com.sap.aii.af.service.util.concurrent.ResourcePoolException: Unable to create new pooled resource: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
    Delivery of the message to the application using connection File_http://sap.com/xi/XI/System failed, due to: com.sap.aii.af.ra.ms.api.RecoverableException: Error when getting an FTP connection from connection pool: com.sap.aii.af.service.util.concurrent.ResourcePoolException: Unable to create new pooled resource: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure.
    Does anybody have some Idea of this ??
    Regards
    Naina

    Hi,
    I guess the problem is not with Variable Substitution..
    Error when getting an FTP connection from connection pool:
    So its a connection problem..
    Also check the option Disable Security check and try again...
    Try to check again if the interface is executing properly without Variable substitution and let us know..
    Babu
    Edited by: hlbabu123 on Jan 7, 2011 2:46 PM

Maybe you are looking for