There is currently no way to prevent any user who has logged in to an FTP port on the Integration Server from seeing the folder structure. Users can only invoke those services for which they have permissions (as defined by ACLs and port limitations), but they can see the names of all services. So if FTP usage is a requirement, it’s a good idea to avoid giving services or folders names which might be sensitive.
For example, if you don’t want customer A to know that you’re also doing business with customer B, don’t name the services anything that indicate the names of the customers.
This is a known limitation, and is likely to be changed in an upcoming release.
#Integration-Server-and-ESB#webMethods#webMethods-General