Connect to external SFTP servers and endpoints

Learn how to connect to an external SFTP endpoint using Couchdrop

Introduction

Couchdrop can connect directly to an external SFTP server, allowing you to transfer files between that server and other systems connected to Couchdrop.

Once connected, the external SFTP server will appear as a Virtual Folder in Couchdrop. You can browse and transfer files directly, use the connection with Automations, or combine it with inbound transfer methods such as Mailboxes, Upload Links, AS2, webhooks, and the S3 Gateway.

This is useful when a partner, vendor, customer, or legacy system already provides an SFTP server and you need to incorporate it into your file transfer workflows without changing the external system.

How it works

Similar to all connections in Couchdrop - all external SFTP connections appear as folders in Couchdrop. Couchdrop can transfer to and from the external SFTP server directly or through automations.

External SFTP providers appear as Virtual Folders in Couchdrop. We recommend learning about Virtual Folders here

Creating an outbound SFTP connection

Before you start

To connect to an external SFTP server with Couchdrop you will need:

• The hostname or IP address and port number for the external server
• A username and password for the external server or a private key

1

Add a new connection

In Couchdrop, click + Create → Connect to Partners/Providers. Alternatively, select + Add Connection from the Connections tab, then choose SFTP Server.

2

Enter your outbound SFTP credentials

Enter the connection details for the SFTP endpoint, including the hostname, port, username, authentication details, and subfolder.

Most SFTP providers use port 22. If you are unsure - try this port first and if it fails chat with your provider.

3

Test and save the connection

Click Test Connection to confirm Couchdrop can connect successfully, then click Save Settings.

Settings

After you have created an outbound SFTP connection, you can configure additional folder-level settings in the same way as any other Virtual Folder in Couchdrop.

Navigate to Browser, hover over the row for the SFTP connection, click the three-dot menu at the far right of the row, then select Manage Folder.

Permissions

Use folder permissions to restrict access to the SFTP connection to specific Couchdrop users or groups.

Setting	Description
Enable Permissions	Enables advanced permissions for the folder. When enabled, access can be restricted to a subset of users.
Add a shortcut in users home folder	Makes the folder appear automatically in the user's home folder for easier access. Files are not copied or moved.
Add Permission	Opens the Configure Permissions window, where you can assign permissions to a user or group.

When adding a permission, the following options are available:

Setting	Options
Which user or group?	Select the user or group that the permission applies to.
What permissions are allowed?	List Contents, Get Properties, Delete, Upload, Download, Share, Create Inbox, Manage Permissions, Manage Notifications

Note: If no users are configured, all access to the folder will be denied.

Notifications

Notifications can alert specified recipients or webhook endpoints when activity occurs within the SFTP connection.

Notification type	Setting	Options / Description
Email Notifications	Send email on	Upload, Download, Failure
	Email Address	Enter the email address that should receive notifications.
Webhook Notifications	Send notification on	Upload, Download, Failure
	Webhook URI	Enter the webhook endpoint that should receive notifications.

Folder Encryption

PGP Folder Encryption and Decryption can automatically encrypt or decrypt files when they are transferred through the folder. Encryption keys are configured from the Encryption Keys tab in the admin section.

Setting	Description
Encrypt files on Upload	Encrypts files when they are uploaded to the folder.
Public keys	Select the public key used to encrypt uploaded files.
Decrypt files on Download	Decrypts files when they are downloaded from the folder.
Private keys	Select the private key used to decrypt downloaded files.

Approval

Approval settings can require files or shared links associated with the SFTP connection to be reviewed before they become available.

Setting	Description
Require approval for shared links	Users creating shared links will require approval before the link becomes active.
Require approval for uploads	Files uploaded to the folder will be staged for approval.

Transfer Shield

Transfer Shield lets you define the type of content expected within the folder and block or surface files for approval when they do not match those expectations.

Setting	Description
Enable Content Classification	Files uploaded into the folder will be classified by Couchdrop's DLP engine.
Block unclassified files	Denies a file if Couchdrop cannot classify it for any reason.
Content Rule Groups	Select the content rule group that should be applied to files uploaded into the folder.

Using SFTP connections in Couchdrop workflows

Once connected, an external SFTP server can be used as a source or destination alongside Couchdrop’s other transfer methods and Automations.

Feature	How it works with an external SFTP connection
Inbound SFTP	Receive files over Couchdrop SFTP and transfer them to the external SFTP server.
Mailboxes	Receive email attachments into Couchdrop and deliver them to the external SFTP server.
Upload Links	Collect files through an Upload Link and send them to the external SFTP server.
Webhooks (HTTPS)	Receive files through an inbound webhook and route them to the external SFTP server.
AS2	Receive files over AS2 and transfer them to the external SFTP server.
S3 Gateway	Receive files through Couchdrop’s S3-compatible interface and transfer them to the external SFTP server.
Automations	Move files to or from the external SFTP server as part of an scheduled or event-driven workflow automation.

Frequently Asked Questions

Do you support RSA key based authentication

Yes - Couchdrop can use key based authentication to connect to external SFTP providers. You can upload a private key when configuring the connection.

Can we schedule a copy from one SFTP server to the cloud

Yes - this is Couchdrop's bread and butter. You can configure a connection to an external SFTP server - select a folder and then automate a transfer using a Scheduled Transfer Automation that polls the SFTP server for new files and then moves them.

Can Couchdrop provide Static IPs that we can whitelist

Yes - Contact our support team to request static IPs.

Do you support legacy ciphers and keys

Yes - we can support some restricted legacy ciphers. Contact our team if you run into connectivity issues.

Are SFTP connections encrypted with Couchdrop

Absolutely - SFTP as a protocol is very secure and uses asymmetric SSL encryption.

Common issues and errors

Access denied

Access denied when browsing, uploading or downloading files generally means that you do not have adequate permissions with the external platform. Contact the external providers support team to make sure you have permissions on their service.

Timeout

A timeout normally occurs when there a firewall preventing access. Check with the external provider and talk to our support team about static IPs for the external vendor to whitelist.