Best protocol suggestion

[harish_babu5]

Hi everyone

The client will place xml files in a folder. Client insists that security is a big concern for them. Cient also wants the whole process to be automated. So they want us to go for either SFTP or AS2. Which option would be the best? Or is there any third option which offers better safety like SOAP or http adapters at sender side. Or any other option that can take care of security and automation better?

Harish

[suman_saha · Accepted solution]

Hi,

If you want SSL based authentication, you can go for FTPS as explained in

SAP Library - Configuring the File/FTP Adapter in Integration Directory/PCK

If you want SSH based authentication, you should go for SFTP which is provided by SAP now and also recommended

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/305eeb5b-81e7-2f10-d8aa-9216de04c...

SSH is more secured than SSL and you may add PGP encryption with this to add more security

cryptography - What is the difference between SSL vs SSH? Which is more secure? - Information Securi...

PGP encryption guide:

AS2 adapter basically for EDI scenarios and you need to install B2B addon to use.

Configuring the Communication Channels with the AS2 Adapter - SAP NetWeaver Process Integration, bus...

Suman

[iaki_vila]

Hi Harish,

If the security is the first factor i prefer the AS2, check this link http://gxsblogs.com/rochellecohen/2011/11/5-considerations-when-choosing-between-as2-and-ftp.html, you can encrypt the channel with SSL then you can have the advantages of the SFTP as well.

Finally, you can establish with your security team a MZ-DMZ for you infrastructure.

Regards.

[suman_saha]

In my opinion,its better to go for SFTP with PGP encryption to achieve this if you are using SAP PI 7.11 or above.

[harish_babu5]

Could you tell me why you felt SFTP is better than AS2? I can present them to the client.

Which is more secure? AS2 or SFTP?

Regards

Harish

[Muniyappan]

SFTP vs AS2.

you can go for AS2.

All About B2B – Which is Best for Your EDI Program? FTP, SFTP, FTPS, or AS2?