SFTPPlus
Encyclopedia
SFTPPlus is a commercial SSH
server
and client
with additional audit
and automation
functions in order to meet regulatory and corporate compliance requirements. It is developed by Pro:Atria Ltd and runs on both Microsoft Windows
and Unix-like
operating systems, including Linux
and Solaris. In addition to the SSH protocol, SFTPPlus supports file transfer using FTP
, HTTP
, FTPS (FTP over SSL), HTTPS and PGP. SFTPPlus provides some automation features, including a configurable service, or daemon
, which can transfer files to predefined destinations and optionally collect response files with configurable names and time intervals.
The program is designed to meet requirements such as those from the Financial Services Authority
(FSA), and has sample configurations provided for both the FSA and the Council of Mortgage Lenders
(CML) reporting environments. It is designed to be easily configured for future systems from these and other regulators as well as corporate requirements. Pro:Atria provide a FIPS compliant version of SFTPPlus using the OpenSSL FIPS object Module by Open Source Software Institute which is FIPS 140-2 validated and certified by NIST
- Certificate No. 642. The certificate states: "Products which use the above identified cryptographic module may be labeled as complying with the requirements of FIPS 140-2 .....".
Secure Shell
Secure Shell is a network protocol for secure data communication, remote shell services or command execution and other secure network services between two networked computers that it connects via a secure channel over an insecure network: a server and a client...
server
Server (computing)
In the context of client-server architecture, a server is a computer program running to serve the requests of other programs, the "clients". Thus, the "server" performs some computational task on behalf of "clients"...
and client
Client (computing)
A client is an application or system that accesses a service made available by a server. The server is often on another computer system, in which case the client accesses the service by way of a network....
with additional audit
Audit
The general definition of an audit is an evaluation of a person, organization, system, process, enterprise, project or product. The term most commonly refers to audits in accounting, but similar concepts also exist in project management, quality management, and energy conservation.- Accounting...
and automation
Automation
Automation is the use of control systems and information technologies to reduce the need for human work in the production of goods and services. In the scope of industrialization, automation is a step beyond mechanization...
functions in order to meet regulatory and corporate compliance requirements. It is developed by Pro:Atria Ltd and runs on both Microsoft Windows
Microsoft Windows
Microsoft Windows is a series of operating systems produced by Microsoft.Microsoft introduced an operating environment named Windows on November 20, 1985 as an add-on to MS-DOS in response to the growing interest in graphical user interfaces . Microsoft Windows came to dominate the world's personal...
and Unix-like
Unix-like
A Unix-like operating system is one that behaves in a manner similar to a Unix system, while not necessarily conforming to or being certified to any version of the Single UNIX Specification....
operating systems, including Linux
Linux
Linux is a Unix-like computer operating system assembled under the model of free and open source software development and distribution. The defining component of any Linux system is the Linux kernel, an operating system kernel first released October 5, 1991 by Linus Torvalds...
and Solaris. In addition to the SSH protocol, SFTPPlus supports file transfer using FTP
File Transfer Protocol
File Transfer Protocol is a standard network protocol used to transfer files from one host to another host over a TCP-based network, such as the Internet. FTP is built on a client-server architecture and utilizes separate control and data connections between the client and server...
, HTTP
Hypertext Transfer Protocol
The Hypertext Transfer Protocol is a networking protocol for distributed, collaborative, hypermedia information systems. HTTP is the foundation of data communication for the World Wide Web....
, FTPS (FTP over SSL), HTTPS and PGP. SFTPPlus provides some automation features, including a configurable service, or daemon
Daemon (computer software)
In Unix and other multitasking computer operating systems, a daemon is a computer program that runs as a background process, rather than being under the direct control of an interactive user...
, which can transfer files to predefined destinations and optionally collect response files with configurable names and time intervals.
The program is designed to meet requirements such as those from the Financial Services Authority
Financial Services Authority
The Financial Services Authority is a quasi-judicial body responsible for the regulation of the financial services industry in the United Kingdom. Its board is appointed by the Treasury and the organisation is structured as a company limited by guarantee and owned by the UK government. Its main...
(FSA), and has sample configurations provided for both the FSA and the Council of Mortgage Lenders
Council of Mortgage Lenders
The Council of Mortgage Lenders is an industry body representing mortgage lenders in the United Kingdom.Its members consist of banks, building societies and specialist lenders and represent 98% of mortgage lending in the UK....
(CML) reporting environments. It is designed to be easily configured for future systems from these and other regulators as well as corporate requirements. Pro:Atria provide a FIPS compliant version of SFTPPlus using the OpenSSL FIPS object Module by Open Source Software Institute which is FIPS 140-2 validated and certified by NIST
National Institute of Standards and Technology
The National Institute of Standards and Technology , known between 1901 and 1988 as the National Bureau of Standards , is a measurement standards laboratory, otherwise known as a National Metrological Institute , which is a non-regulatory agency of the United States Department of Commerce...
- Certificate No. 642. The certificate states: "Products which use the above identified cryptographic module may be labeled as complying with the requirements of FIPS 140-2 .....".