Jump to content



Photo

Transfer files from FTP to SFTP ?

sftp

  • Please log in to reply
12 replies to this topic

#1 zoheb

zoheb

    Neowinian

  • Joined: 02-January 10
  • Location: haLLuNicaTeD pAradISe

Posted 03 August 2014 - 14:43

I need to work on getting call recordings from third party location to our SFTP servers. They gave us two options. 
 
1. They push them automatically to us. They can only send them in FTP format but not SFTP format. I don't know if this a problem or not so let me know. 
 
2. If FTP is a problem then the other way they can do it is set up an FTP server on their side that we can access and pull records to our SFTP server. 
 
Let me know which of the options we would like to go with so that we can proceed with it.
 
If we pull recordings from their FTP server to our SFTP server, Will it be secure? 
 
TIA !! 



#2 EddieF

EddieF

    Neowinian

  • Joined: 04-November 02
  • Location: Ohio/Michigan border
  • OS: Win 7
  • Phone: Droid Razr

Posted 03 August 2014 - 14:54

It doesn't matter if they push it via FTP to you or you pull it via FTP from you SFTP server.  It is still going to be FTP. 

 

If they won't support SFTP, they may be able to do FTPS, which still uses the FTP protocol, but adds a layer of encryption. SFTP is a different protocol altogether, generally utilizing SSH. 

 

http://www.jscape.co...P-FTPS-and-SFTP

 

http://www.differenc...n-ftp-and-sftp/



#3 OP zoheb

zoheb

    Neowinian

  • Joined: 02-January 10
  • Location: haLLuNicaTeD pAradISe

Posted 03 August 2014 - 16:15

Thanks Eddie, Is there any mechanism such that the data can be transferred or pulled from  FTP > SFTP maintaining the security of data during communication (without FTPS).  I am not comfortable with hosting an FTP server at my end because it may be vulnerable to our Production environment. 

 

If they setup FTPS, then what complication can we have pulling data from their end?

 

TIA ... 



#4 heatlesssun

heatlesssun

    Neowinian

  • Joined: 31-May 12

Posted 03 August 2014 - 16:37

If you have an SFTP server setup, all they need is an SFTP client, those can be had for free and it really should be that different from their perspective. I'd question as to what the problem is in using SFTP on their end and try to get a specific reason.



#5 EddieF

EddieF

    Neowinian

  • Joined: 04-November 02
  • Location: Ohio/Michigan border
  • OS: Win 7
  • Phone: Droid Razr

Posted 03 August 2014 - 19:00

Without using FTPS or SFTP, your data won't be encrypted.

 

I agree with heatlessun, if they are unwilling to install a SFTP client, I would seriously question how secure they are to begin with. 

 

If the FTP server is on their side, and FTP client on your side, other than the data not being encrypted, I don't think it'll pose any serious security risks to your server.



#6 OP zoheb

zoheb

    Neowinian

  • Joined: 02-January 10
  • Location: haLLuNicaTeD pAradISe

Posted 04 August 2014 - 06:40

If they setup FTPS (FTP over SSL), and we setup FTP (without SSL) or FTP client at our end, I think the communication will be in encrypted manner, Am I right?

 

Now eventually all our recordings are on SFTP server which users listen via Salesforce.  So can FTP client Or FTP at our end simply pass the data it receives to SFTP server? 

Or is there any such mechanism available?

 

Thanks !! 



#7 The_Decryptor

The_Decryptor

    STEAL THE DECLARATION OF INDEPENDENCE

  • Tech Issues Solved: 5
  • Joined: 28-September 02
  • Location: Sol System
  • OS: iSymbian 9.2 SP24.8 Mars Bar

Posted 04 August 2014 - 07:01

If you're running a FTPS server you can mandate encryption so that any (good) FTP client will use encryption. SFTP always uses encryption so it's not a problem there.

Now if the client is on your end and you're pulling data from their servers then they'll need to enable FTPS, if they won't or can't then SFTP is your only option (And if that doesn't work, then you're out of uck)

#8 OP zoheb

zoheb

    Neowinian

  • Joined: 02-January 10
  • Location: haLLuNicaTeD pAradISe

Posted 04 August 2014 - 07:12

Thanks for answering my query ... !!
Assuming they enabled FTPS. Now I want to move data from FTP client at our end to SFTP server at our end. So can FTP client Or FTP at our end simply pass the data it receives to SFTP server? OR is there any such mechanism available? OR we need to manually copy the data over to SFTP server via some script?
 
TIA !!! 


#9 The_Decryptor

The_Decryptor

    STEAL THE DECLARATION OF INDEPENDENCE

  • Tech Issues Solved: 5
  • Joined: 28-September 02
  • Location: Sol System
  • OS: iSymbian 9.2 SP24.8 Mars Bar

Posted 04 August 2014 - 07:38

FTP client at our end to SFTP server at our end


Why are you doing that? Just move the files on disk so that the different servers have access to them.

#10 OP zoheb

zoheb

    Neowinian

  • Joined: 02-January 10
  • Location: haLLuNicaTeD pAradISe

Posted 04 August 2014 - 07:55

Why are you doing that? Just move the files on disk so that the different servers have access to them.

 

You mean move files from FTP client > SFTP server? 



#11 Walid W.

Walid W.

    I love Orcinus Orca

  • Tech Issues Solved: 3
  • Joined: 19-July 08
  • Location: Lost somewhere in Sweden
  • OS: Ubuntu, Debian, Backtrack 5r, Windows 7 & XP
  • Phone: iPhone 3GS, iPhone 4s & HTC One

Posted 04 August 2014 - 08:00

Moved to Internet, Network & Security.



#12 Mike

Mike

    Neowinian Senior

  • Joined: 11-August 02

Posted 04 August 2014 - 09:06

If this is at a work place, get out of your job tbh. This is a simple thing to sort out and if you can't it sounds like you're in over your head



#13 +BudMan

BudMan

    Neowinian Senior

  • Tech Issues Solved: 96
  • Joined: 04-July 02
  • Location: Schaumburg, IL
  • OS: Win7, Vista, 2k3, 2k8, XP, Linux, FreeBSD, OSX, etc. etc.

Posted 04 August 2014 - 11:37

"They gave us two options. "

Wrong Answer -- As stated already, sftp is secure, ftp is not - have them sftp it. Why is this your problem, sounds like a problem for the 3rd party.

You send me those files, I have sftp server - create your public key and send it to me so that you can auth should be your only option to them!! Because you do not allow password auth since it less secure that public key auth.

As stated there are sftp client for every OS they could be running, many free - others a couple of bucks.. This really should be the end of the conversation.

Also the files should be encrypted before sending in the first place, so uploading them to an ftp server shouldn't be an issue - but good luck getting them to encrypt the files if they can not even send it sftp ;)