Good evening. I have decided to completely remove FTP/FTPS from our servers, as it's too high a security risk these days and instead replacing it with SFTP users and jailkit, for the few that actually needs it. But how would I go about removing the FTP options from the sidepanel in Sites in ispconfig? I mean I could just remove it in /usr/local/ispconfig/interface/web/sites/menu.php but I don't like that type of hack. Any good advice here?
I don't think there's such an option at this time. It would have to be implemented (which is not a bad idea).
Just make sure you're customers can't create FTP users by setting it to 0 in the customer's limits. It won't remove it from the sidepanel but when they try to create a user they'll see they can't (use FTP).
When you set the number of FTP clients to 0, then it is already removed from the menu for this client. The admin will still see it, though. Also, when you enforce TLS for FTP, which means allowing FTPS only, it should be fairly secure. Allowing SSH access for file uploads is probably a higher risk than allowing FTP with FTPS only, as long as you would not have granted SSH access anyway.
