IBM Support

FTP-SSL versus SFTP

Troubleshooting


Problem

This document details the pros and cons of each TCP application.

Resolving The Problem

This table details the basic pros and cons of each TCP application.

FTP - SSLOpenSSH - SFTP
Part of base operating system.LPO (5733SC1) that runs in the PASE environment. Support is through Open Source community.
CL programs work well with FTP - SSL. Batch processes are straightforward to configure.QP2SHELL has limitations that must be programmed around. No provisions to pass command status back to IBM i5/OS. Programs must verify that operation competed.
Security through certificates.Security through RSA or DSA keys.
Can access library system and IFS and do basic EBCDIC-to-ASCII conversion for some file types.Defaults to Integrated File System (namefmt 1); however, can reach library system through use of path. Supports only binary transfer of data. No character conversion.
Works well as a client or server.Works well as a server; however, QSH and QP2TERM/QP2SHELL are not true TTY devices. Requires ssh-keygen to build pre-shared keys without pass phrase, or ssh-agent to store pass phrase data to operate as a client.
Some Clients do not work with FTP - SSL natively, requiring the use of third-party software products.Most UNIX environments support OpenSSH natively. Windows users can use open source products to connect with secure shell servers.
A successful file transfer requires two connections (Control & Data) be opened. NAT devices can't peak into the packets to open up the necessary data connection when FTP data is secured with SSL. There's no separate data connection used with SFTP. All SFTP data is sent/received over a single port e.g. 22. The use of a single port for SFTP makes it a popular choice when file transfers need to be done securely through NAT devices.

[{"Product":{"code":"SWG60","label":"IBM i"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Component":"Communications-TCP","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"Version Independent","Edition":"","Line of Business":{"code":"LOB57","label":"Power"}}]

Historical Number

406673182

Document Information

Modified date:
18 December 2019

UID

nas8N1015100