SFTP (FTP over SSH)
GoAnywhere supports SFTP (FTP over SSH) protocol for securing data transmissions with your trading partners. SFTP creates an encrypted tunnel between two computer systems and will protect against the following attacks:
- IP spoofing, where a remote host sends out packets which pretend to come from another, trusted host
- IP source routing, where a host can pretend that an IP packet comes from another, trusted host.
- DNS spoofing, where an attacker forges name server records
- Interception of cleartext passwords and other data by intermediate hosts
- Manipulation of data by attackers in control of intermediate hosts
GoAnywhere SFTP features
GoAnywhere provides comprehensive SFTP features to satisfy enterprise requirements.
- Ability to authenticate using passwords or SSH keys
- Comprehensive support of the FTP command set
- Get, Put, Delete and Move files
- Create, Change and Rename directories
- Execute custom commands
- Transfer multiple files per connection
- Autodetect Binary and ASCII modes
- Indicate the number of connection retry attempts and timeout values
- Auto suffix and prefix file names with constants, timestamps or variables
- Override file names and other properties at execution time using variables
- Auto retry with user-defined connection timeouts and retry limits
- Configurable port numbers
- Support for Adaptive connections
- Generation of detailed logs (audit trails)
Example of a SFTP definition (basic settings) in GoAnywhere:
SSH Key Management
A comprehensive Key Manager is provided in GoAnywhere to allow for the management of SSH Keys. This Key Manager can be used to create SSH public and private keys, export keys and view keys. These SSH Keys can be utilized within GoAnywhere for automating SFTP transmissions.
Standards Support for SFTP
GoAnywhere supports the following standards for SFTP.
Protocol
- SSH 2.0
Ciphers (Symmetric Encryption Algorithms)
- Triple DES, key length of 192 bit
- Blowfish, key length up to 448 bit
- AES, key length up to 256 bit
MAC Algorithms
- MAC-SHA1, key length of 160 bit, digest length of 160 bit
- HMAC-SHA1-96, key length of 160 bit, digest length of 96 bit
- HMAC-MD5, key length of 128 bit, digest length of 128 bit
- HMAC-MD5-96, key length of 128 bit, digest length of 96 bit
Key Exchange Algorithms
- Diffie-Hellman
- MODP Groups 1, 2, 5 (1536-bit), 14 (2048-bit), 15 (3072-bit), 16 (4096-bit), 17 (6144-bit) and 18 (8192-bit).
SSH Private Keys
- OpenSSH encoded keys
- PEM (privacy enhanced message) encoded keys
SSH Public Keys
- OpenSSH encoded keys
GoAnywhere Director can be installed onto IBM System i, IBM System p (AIX), IBM System z (Mainframe), Windows, Linux, UNIX, HP-UX, Mac OS and Solaris platforms. System i is also referred to as iSeries, as400, as/400 and i5.
