INLS187 spring 2003
Assignment 3
Li Chen
I chose Fsecure (version 5.2) for my software evaluation and installed Fsecure on Windows 2000 system. I chose Fsecure is not only because it is easy to use, but also because it can provide a security environment for transferring files.
Installation is very simple. After downloaded a compressed file, I saved this file in my C drive. Then I used WinRAR to unzip this file. (See Figure 1) After double click Install folder as shown in figure 1, Fsecure was automatically installed. Figure 2 is the first window prompt up when F-secure is installed. As installed other software, I just followed the instructions and add Fsecure 5.20 in my C drive program file folder. (Figure 3)



The whole procession of installation is about 5 minters. After installation, two icons – F-secure SSH client and F-secure SSH file transfer were automatically added on my screen. Two red arrows in Figure 4 pointed the two icons. Then just double clicked the icons, I can use this software.
Fsecure was designed by F-secure Security Corporation. Fsecure 5.20 is the most recent version, and it is available for Windows 95, 98, Windows NT4, 2K, Me, and Windows XP. This software can be purchased for a one-time price of $115 from http://www.fsecure.com. Version 5.20 contains two packages: F-secure SSH client and F-secure SSH file transfer.
F-secure version 5.20 allows users safely connect to and manage network resources. Users do not worry that their passwords and transferred data will be revealed to outsiders. In other words, using F-secure, users can connect remotely and transfer files without security concerns. Version 5.20 has four authentication methods: password, public keys, SecurID and certificates.
F-secure version 5.20 authenticates server and encrypts traffic between the server and client. The company claimed that: F-secure version 5.20 adopted SFTP or SCP, but not the insecure FTP protocol, so it can safely transfer files; Version 5.2 used strong encryptions to encrypt all traffic and used TCP/IP protocols as secure tunneling to enable secure Internet connections such as database access; The use of host authentication also keeps attacks from transfer procession. Version 5.2 supports both SSH1 protocol and SSH2 protocol. Hence, this software is a good choose for banking, insurance company, military and governmental customers who required special security.
F-secure SSH Client Test
In order to test the effectiveness of F-secure SSH client I invoked it by double clicking its icon. A terminal window was shown as in Figure 4 on the screen after invoked. Form this window users can connect safely to remote systems. For this section, I used two remote hosts, eagle.cs.unc.edu and underdog.ils.unc.edu (both systems are UNIX systems), to test whether this successfully connected these hosts. I adopted password as my authentication method. The connections were successes. However, when I used the kiwi.ils.unc.edu and owl.ils.unc.edu as the remote hosts, I cannot connect them. According to the information from the screen, I found that it was because my local system is protected by a firewall and the firewall cannot be properly configured. For this case, the solution was that asked the local administrator to reconfigure the firewall.



F-secure SSH File Transfer Test
I also clicked the icon of F-secure SSH File Transfer to test its effectiveness. F-secure File Transfer is a securely tool and it also provides a window interface after invoked. Figure 5 was the shown screen. My test criteria are:
1) Does it work for every remote host?
2) Is it faster than FTP?
For the first criteria I used the same four remote hosts as above to test. The same case was appeared. F-secure File Transfer can successfully transfer all promised file from the remote hosts eagle.cs.unc.edu and underdog.ils.unc.edu, but it couldn’t login kiwi.ils.unc.edu and owl.ils.unc.edu. The reason was also that the firewall couldn’t configure. In order to test the criteria two, I used two methods to transfer a same file directory. FTP took seven seconds to transfer this directory, while F-secure File Transfer used 20 seconds to do it. Hence, we could say that FTP is faster to transfer files than F-secure File Transfer.

Figure 5
It is ideal software for company and government used, however, it is not very suitable for home use, because it is not free. Another reason is the speed of transfer files is slower than some other software. The last but not the least reason is that family always do not care security problems when they transfer files or login the remote host, but they want that their connections are successful. On the other hands, it is really a good choose for an institution to use F-secure. Not only is it easy to use, but also it is with high security features.