How to set up and use QuFTP Service

Configure the FTP server to securely transfer files across the network using Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, and manage user access to FTP functions. You can also define the bandwidth and connection limitations for user accounts and enable passive FTP to allow FTP clients to establish data connections.

Configuring General FTP Server Settings

1. Open QuFTP Service.
2. Go to FTP Server > System > General.
3. Select Enable the FTP server.
4. Configure the FTP protocol settings.
   • FTP (Standard): Enable to use FTP with implicit SSL/TLS function. The server uses port 21 for secured and unsecured services.
     Note

     FTP (Standard) is enabled by default.
   • FTP with SSL/TLS (Explicit): Enable to use FTP with explicit SSL/TLS functionality. Once the connection is established, the server uses the configured SSL certificates and selected TLS configuration to secure the connection.
5. Configure the FTP with explicit SSL/TLS settings.
   1. Click Configure SSL Certificates to update the SSL certificate.
      Tip

      To configure the SSL certificates, see the SSL certificate installation section of the QTS User Guide.
   2. Select the TLS protocol version.
      Important

      Before selecting TLS 1.2 or later, ensure that all FTP clients support TLS 1.2.
6. Specify the FTP port number.
   Note

   By default, FTP communications use port 21.
7. Configure the SFTP and service binding settings.

   Setting	User Action
   Enable SFTP	To configure SFTP, see the Telnet/SSH section of the QTS User Guide.
   Enable service binding	To configure service binding, see the service binding configuration section of the QTS User Guide.

8. Configure additional FTP server settings.

   Setting	User Action
   Enable Unicode support	Enable to allow the FTP server to support UTF-8 character encoding during file transfer.
   Enable anonymous access	Enable to allow users to access the service without needing to log in. Note QNAP does not recommend using anonymous FTP. Enabling this function permits any user to access the FTP service without identification and could pose a security risk.
   Enable welcome message	Enable to specify a message that displays when FTP clients log in. Click Edit Message. Specify the welcome message. Click Apply.
   Enable Mode Z compression	Enable to allow the FTP clients to use the zlib software library to compress data transfers.
   Set root folder	Enable to select the default FTP directory for FTP clients. Important To use this feature, you must first provide root folder access to all the FTP clients in Users > Edit Shared Folder Permission. Alternatively, you can enable root folder access in Control Panel > Privilege > Shared Folders.
   Enable FTP WORM (Write Once Read Many) function	Enable to implement WORM permissions on specified folders. Click Select Folders. The Select WORM (Write Once Ready Many) Folders window appears. Select the folders. Click Apply. Note WORM folders cannot be erased or modified by FTP users.

9. Configure alert notifications for selected folders.
   1. Next to Send out alert messages when changes are detected within selected folders, click Select Folders.
      

      The Select folders to monitor window appears.

   2. Select the folders from the local volume.
      

      The folder path appears in the right panel.

      Tip

      Clickto remove the selected folder.
   3. Specify the time interval to send out alerts.
   4. Click Apply.
   5. Click Configure Notification Rule.
      

      Notification Center opens and the Create event notification rule window appears.

10. Click Apply.

QuFTP Service applies the settings and restarts.

Configuring FTP Server Connection Settings

1. Open QuFTP Service.
2. Go to FTP Server > System > Connection.
3. Configure the FTP connection limitations.
   1. Specify the maximum number of allowed FTP connections.
   2. Specify the maximum number of connections per FTP user.
4. Configure the FTP speed limitations.

   Setting	User Action
   FTP transfer limitations	Click Enable FTP transfer limitations. The FTP bandwidth settings become accessible. Specify the maximum upload rate. Specify the maximum download rate.
   Speed limitations	Click Enable speed limitation for users and groups. The speed limitation settings become accessible. Click Speed Limits. The Speed Limits window appears. Select the FTP client type. Under Active, select the user or user group checkbox. Specify the maximum upload and download rate. Click Apply.

5. Configure the passive FTP settings.
   Note

   • The Use the default port range setting is enabled by default.
   • The default passive FTP port range is 55536-56559.
   1. Select Define port range.
   2. Specify the passive FTP port range between 1025 and 65535.
   3. Select Respond with external IP address for passive FTP connection request.
      Note

      Specify an external IP address only when the FTP server is behind the NAT configuration.
   4. Specify the external IP address.
6. Click Apply.

QuFTP Service applies the settings.

An FTP account allows users to access files on your device via FTP. You can create multiple users and also configure selective access to directories within the device domain. An FTP user can gain access to different FTP directories by being a member of multiple user groups. The admin user account is the default FTP user account. It can configure settings, create users, and install applications.

1. Go to FTP Server > Users.
   The Users page appears.
2. Configure the settings.

   Task	User Action
   Creating an FTP user	Go to FTP Server > Users. Click Create > Create an FTP User. The Create an FTP User window appears. Configure the FTP user settings. The FTP user settings are identical to the QTS local user settings. To configure the FTP user settings, see the local user creation section of the QTS User Guide. Important FTP users can only access the FTP server application. All other application privileges are blocked. To grant access to other applications, go to Control Panel > Privilege > Users > Edit Application Privilege.
   Creating multiple users	Go to FTP Server > Users. Click Create > Create Multiple Users. Configure the multiple user settings. To configure the multiple user settings, see the multiple user creation section of the QTS User Guide.
   Importing users	Go to FTP Server > Users. Click Create > Batch Import FTP Users. Select Import user and user group settings. Configure the import user settings. To import users and user groups settings, see the user import section of the QTS User Guide.
   Exporting users	Go to FTP Server > Users. Click Create > Batch Import FTP Users. Select Export user and user group settings. Click Next. QuFTP Service exports the user and user settings to the local device in BIN format.

Modifying User Account Settings

1. Go to FTP Server > Users.
   The Users page appears.
2. Identify a user.
3. Under Action, click.
   The Edit Account Profile window appears.
4. Optional: Specify the email address and phone number.
5. Enter a user description up to 50 characters.
6. Edit the settings.
   Note

   The Edit Account Profile window provides the following settings that are not included in the Create an FTP User window.

   Setting	Description
   Disallow the user to change password	Select to prevent the user from changing the password.
   Disable this account	Select to disable the user account. You can either select to disable the account Now or specify an Expiry Date.

7. Assign FTP rules to the user account.
   1. Enable Apply rule from Rules Engine.
   2. Select the FTP rule from the drop-down list.
      Note

      To create a new FTP rule, see Creating an FTP Rule.
8. Click OK.

QuFTP Service updates the user account information.

Assigning User Groups to a User

You can assign multiple user groups to a user account to better file access.

1. Go to FTP Server > Users.
   The Users page appears.
2. Identify a user.
3. Click .
   The Edit User Group window appears.
4. Select the user groups.
5. Click Apply.

QuFTP Service assigns the selected user groups to the user.

Deleting a User

1. Go to FTP Server > Users.
   The Users page appears.
2. Identify a user.
3. Next to the username, click .
4. Click Delete.
   A confirmation message appears.
5. Click OK.

QuFTP Service deletes the selected users.

Managing FTP User Privileges

1. Go to FTP Server > Users.
   The Users page appears.
2. Select a method for changing the FTP access.
   1. Next to the username, click .
   2. Click FTP Privilege.
   3. Change the FTP access for the selected users.
      • Grant: Select to enable FTP privilege
      • Deny: Select to disable FTP privilege
   4. Identify an FTP user.
   5. Change the FTP access for the user.
      • : Click to provide FTP access to the user
      • : Click to deny FTP access to the user

QuFTP Service updates the FTP privilege.

User groups allow you to assign permissions and control access for multiple user accounts simultaneously.

QuFTP Service has two default user groups.

Creating a User Group

1. Go to FTP Server > Groups.
   The Groups page appears.
2. Click Create.
   The Create FTP User Group window appears.
3. Specify the User group name.
   Name requirements:
   • Length: 1–128 characters
   • Valid characters: A–Z, a–z, 0–9
   • Valid multibyte languages: Chinese, Japanese, Korean, Russian
   • Valid special characters: Hyphen (-)
4. Optional: Specify a description that contains a maximum of 128 characters.
5. Optional: Add users to the user group.
   1. Under Assign users to this group, click Edit.
   2. Select the permissions for each shared folder.
6. Optional: Specify shared folder permissions for the user group.
   1. Under Edit shared folder permissions, click Edit.
   2. Select the permissions for each shared folder.
7. Click Create.

QuFTP Service creates the user group.

Modifying User Group Settings

1. Go to FTP Server > Groups.
   The Groups page appears.
2. Identify a user group.
3. Under Action, click.
   The Edit Group Details window appears.
4. Specify a description that contains up to 128 characters.
5. Assign FTP rules to the user group.
   1. Enable Apply rule from Rules Engine.
   2. Select an FTP rule from the drop-down list.
      Note

      To create a new FTP rule, see Creating an FTP Rule.
6. Click Apply.

QuFTP Service updates the user group information.

Adding an FTP User to a User Group

1. Go to FTP Server > Groups.
   The Groups page appears.
2. Identify a user group.
3. Under Action, click .
   The Edit Group Details window appears.
4. Select the FTP users.
5. Click Apply.

QuFTP Service adds the selected users to the user group.

Deleting a User Group

1. Go to FTP Server > Groups.
   The Groups page appears.
2. Identify a user group.
3. Next to the username, click .
4. Click Delete.
   A confirmation message appears.
5. Click OK.

QuFTP Service deletes the user group.

You can configure rules for the FTP server by controlling the times during which the server is accessible, adding digital watermarks to files in a folder, and limiting FTP users access only to the designated root directory.

Creating an FTP Rule

1. Go to FTP Server > Rules Engine.
   The Rules Engine page appears.
2. Click Create.
   The Create Rule window appears.
3. Specify the FTP rule name.
4. Optional: Configure the FTP folder access hours.
   1. Enable Restrict access hours.
   2. Click Set Hours to specify a timeframe.
      The Access Hours window appears.
   3. Select the hours during which the FTP folders are inaccessible.
      • : The FTP folders can be accessed by the FTP users.
      • : The FTP folders cannot be accessed by the FTP users.
   4. Click Apply.
      QuFTP Service applies the schedule.
5. Limit access to an access folder.
   1. Enable Limit access to only FTP root folder.
   2. Select the root folders.
6. Configure the watermark settings.
   1. Enable Automatically insert watermarks into uploaded pictures and videos.
      You can add digital watermarks to the following file formats.
      Note

      • In order to add watermarks to images in QuFTP Service, make sure you have Multimedia Console and Video Station installed and enabled on your device.
      • Make sure that transcoding is enabled in Video Station. To enable transcoding, go to Video Station > Transcoding.

      File	Format
      Graphics	BMP, GIF (non-animated .gif files), JPEG, PNG, TGA, TIFF
      Media	3GP, ASF, AVI, DIVX, F4V, FLV, INSV, M2T, M2TS, M4V, MKV, MLV, MOD, MOV, MP2V, MP4, MPEG, MPV2, MTS, RM, RMP4, RMVB, TOD, WMV

   2. Click Edit.
      The Watermark Settings window appears.
   3. Select a watermark option.

      Setting	User Action
      Add text watermark	Specify the watermark text. Select the font and background color.
      Add image watermark	Click Select image. Select from the following: From the NAS From your computer Select the image from the NAS local volume or your computer. Click Open. The image appears on the preview pane. Important You can use the following file formats for the digital watermarks: BMP, GIF, JPG, PNG Maximum file size: 2 MB

   4. Adjust the watermark opacity.
   5. Adjust the watermark proportion.
   6. Specify the watermark placement.

      Setting	Description
      Specific	The watermark is placed at one of the pre-defined positions
      Custom	The watermark is dragged and dropped on any location on the file
      Tiled	The watermark is repeated horizontally and vertically

   7. Click Save.
      QuFTP Service updates the watermark.
   8. Select the source folder to apply the watermark settings.
   9. Select the destination folder to apply the migrated watermark settings.
7. Click Add.

QuFTP Service creates the FTP rule.

Deleting an FTP Rule

1. Go to FTP Server > Rules Engine. The Rules Engine page appears.
2. Identify an FTP rule.
3. Click beside the rule name.
4. Click Delete.
   A confirmation message appears.
5. Click OK.

QuFTP Service deletes the FTP rule.

Setting Rule Priorities

FTP rules are prioritized in the order they are listed; you can change the rule priority by adjusting the order.

1. Go to FTP Server > Rules Engine. The Rules Engine page appears.
2. Identify an FTP rule.
3. Configure the FTP priority.

   Setting	User Action
   	Click to move the rule up in priority.
   	Click to move the rule down in priority.

QuFTP Service automatically applies the rule priority.

Creating an FTP Remote Connection

1. Go to FTP Client > Remote Connections.
   The Remote Connections page appears.
2. Click Create.
   The Create remote mount window appears.
3. Specify the character encoding code page.
4. Specify a domain name or IP address of the remote host.
   1. Enter the domain name or IP address.
   2. Click Scan.
      QuFTP Service scans and updates the domain name of the remote host.
5. Specify a port number.
   Note

   The default value of the FTP port is 21.
6. Configure login settings.
   1. Enable Anonymous login.
      Important

      Anonymous login is available only if the remote host you are accessing has established an anonymous FTP server.
   2. Specify the username and password of the remote host.
7. Configure the destination folder settings.
   • Mount directly: Enable to mount the remote host directly on to your FTP server.
   • Mount specific folder: Enable to mount the remote host on to a specific folder.
8. Specify a remote connection name.
9. Click Create.

QuFTP Service creates the remote connection.

Modifying Remote FTP Permissions

1. Go to FTP Client > Remote Connections.
   The Remote Connections page appears.
2. Identify a remote connection.
3. Click .
   The Edit Remote FTP Permissions window appears.
4. Add users and user groups.
   1. Click Add.
      The Select users and groups window appears.
   2. Select the type of user or user group from the drop-down list.
   3. Edit the user's permission.
   4. Click Add.
      The window closes.
5. Edit the guest access permission.
6. Edit the access permission of the existing users and groups.
7. Click Apply.

QuFTP Service applies the modified settings to the remote connection.

Deleting an FTP Client Remote Connection

1. Go to FTP Client > Remote Connections.
   The Remote Connections page appears.
2. Identify a remote connection.
3. Next to the username, click.
   Note

   Select one or more remote connections by clicking the checkbox beside the remote folder name.
4. Click Delete.
   A confirmation message appears.
5. Click OK.

QuFTP Service deletes the remote connection.

QuFTP Service allows you to view online FTP sessions, user and group permissions to monitor folder access, and event logs to diagnose application issues.

Viewing Shared Folder Permissions

You can review folder permissions for specific users or user groups in QuFTP Service.

1. Select a user or user group to view the folder access permissions.
   • On the left panel, go to FTP Servers > Users.
   • On the left panel, go to FTP Servers > Groups.
   The list of available users or user groups displays.
2. Identify a user or user group.
3. Click .
   The Folder Access Permissions window appears.You can review the following information:
   • Folder name
   • Applied permissions to the folder
   • Folder source
     • Local volume
     • HybridMount
4. Click Close.

Viewing the QuFTP Service Information

The QuFTP Service Overview screen shows a dashboard with the online FTP users and their information, the number of online FTP sessions, and the overall data transfer rate.

The Overview screen has four main areas.

Managing Logs

QuFTP Service records actions that are performed inside the application. You can view and filter both application access and event logs.

1. Go to Logs.
2. Select from the following logs.
   • System Event Logs
   • System Access Logs
3. Perform any of the following tasks.

   Task	Possible User Actions
   Filter the logs	Click All severity levelsto filter the logs based on the following severity levels: Information Warning Error
   Search log contents	Click Content Searchto enter a specific log keyword. Note Clickto clear the search field contents.

QuFTP Service performs the specified action.