FTP channel DLP test (public server)
| Parameter | Value | Action |
|---|---|---|
| Host | ftp.dlpbench.com | |
| Port / mode | 21 · FTP · passive | |
| User | bench@d134269.hostus5.fornex.host | |
| Password | k0zwbp9ycxfe625oeo |
FileZilla
- Import the XML or create the site manually (login/password above).
- Encryption: plain FTP only; mode passive.
- Upload a file → click Refresh below (file stays in the list ~15 min).
Accepted files (shared list)
Finance, vendors, clinics — teams still move batch files with FileZilla or WinSCP. A browser site block does not see that session: an FTP client speaks its own protocol.
Take a test file from the right panel or the sample library, upload it to our server (connection details above), and click Refresh. If the file appears in the list and FTP block policies are on, DLP did not stop this channel. Files stay up to 15 minutes.
curl
curl -T ./hello-dlp.txt ftp://bench%40d134269.hostus5.fornex.host:k0zwbp9ycxfe625oeo@ftp.dlpbench.com/ # Plain text with no identifiers: the request should arrive. If it fails, check the network or an overly strict policy.
curl -T ./us-name-ssn-passport-30.csv ftp://bench%40d134269.hostus5.fornex.host:k0zwbp9ycxfe625oeo@ftp.dlpbench.com/ # Test SSN and card: with DLP configured the request should not leave. If you get ok — the channel was not stopped.
FTP FAQ
Is this SFTP or FTPS?
Plain FTP, port 21, passive mode. Files stay on our server no more than 15 minutes.
How do I know the policy did not fire?
You uploaded successfully and see the file in the list on this page. If the file is missing or the client dropped the session — check the DLP log and the network path.
Why block FTP?
FTP is a separate transfer protocol; HTTP rules do not cover it. Typical clients are FileZilla and WinSCP.
Where do I get files for the test?
Use Sample materials on the right, the sample library, or Sample data.
How do I test an FTP upload?
Use FileZilla or WinSCP (the built-in Windows FTP client is awkward for this). Login and password are on this page; FileZilla profile — XML. Upload a synthetic file from the library.
If the file appears in the list on this page, it reached the range — no block on this channel (or none configured). If the client disconnects or the file is missing — check your DLP log and network. Files on the range stay about 15 minutes.
Use this service during a DLP pilot or in production. Run several tests — files with random text and files with sensitive data. Confirm your DLP can intercept this channel.
Keep testing exfil channels
Try a web form upload or repeat the test with other data.