> For the complete documentation index, see [llms.txt](https://docs.couchdrop.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.couchdrop.io/managed-file-transfer/sftp/connect-to-external-sftp-servers-and-endpoints.md).

# Connect to external SFTP servers and endpoints

Learn how to connect to an external SFTP endpoint using Couchdrop

## Introduction

Couchdrop can connect directly to an external SFTP server, allowing you to transfer files between that server and other systems connected to Couchdrop.

Once connected, the external SFTP server will appear as a [**Virtual Folder**](/storage/file-browser.md) in Couchdrop. You can browse and transfer files directly, use the connection with Automations, or combine it with inbound transfer methods such as Mailboxes, Upload Links, AS2, webhooks, and the S3 Gateway.

This is useful when a partner, vendor, customer, or legacy system already provides an SFTP server and you need to incorporate it into your file transfer workflows without changing the external system.

## How it works

Similar to all connections in Couchdrop - all external SFTP connections appear as folders in Couchdrop. Couchdrop can transfer to and from the external SFTP server directly or through automations.

{% hint style="success" %}
External SFTP providers appear as Virtual Folders in Couchdrop. We recommend learning about Virtual Folders [here](/storage/file-browser.md)
{% endhint %}

## Creating an outbound SFTP connection

{% hint style="warning" %}

#### Before you start

To connect to an external SFTP server with Couchdrop you will need:

* The hostname or IP address and port number for the external server
* A username and password for the external server or a private key
  {% endhint %}

{% stepper %}
{% step %}

### Add a new connection

In Couchdrop, click **+ Create → Connect to Partners/Providers**. Alternatively, select **+ Add Connection** from the **Connections** tab, then choose **SFTP Server**.
{% endstep %}

{% step %}

### Enter your outbound SFTP credentials

Enter the connection details for the SFTP endpoint, including the hostname, port, username, authentication details, and subfolder.

{% hint style="info" %}
Most SFTP providers use **port 22.** If you are unsure - try this port first and if it fails chat with your provider.
{% endhint %}
{% endstep %}

{% step %}

### Test and save the connection

Click **Test Connection** to confirm Couchdrop can connect successfully, then click **Save Settings**.
{% endstep %}
{% endstepper %}

## Settings

After you have created an outbound SFTP connection, you can configure additional folder-level settings in the same way as any other Virtual Folder in Couchdrop.

Navigate to **Browser**, hover over the row for the SFTP connection, click the **three-dot menu** at the far right of the row, then select **Manage Folder**.

### Permissions

Use folder permissions to restrict access to the SFTP connection to specific Couchdrop users or groups.

| Setting                                 | Description                                                                                                       |
| --------------------------------------- | ----------------------------------------------------------------------------------------------------------------- |
| **Enable Permissions**                  | Enables advanced permissions for the folder. When enabled, access can be restricted to a subset of users.         |
| **Add a shortcut in users home folder** | Makes the folder appear automatically in the user's home folder for easier access. Files are not copied or moved. |
| **Add Permission**                      | Opens the **Configure Permissions** window, where you can assign permissions to a user or group.                  |

When adding a permission, the following options are available:

| Setting                           | Options                                                                                                                                                    |
| --------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Which user or group?**          | Select the user or group that the permission applies to.                                                                                                   |
| **What permissions are allowed?** | **List Contents**, **Get Properties**, **Delete**, **Upload**, **Download**, **Share**, **Create Inbox**, **Manage Permissions**, **Manage Notifications** |

{% hint style="warning" %}
**Note:** If no users are configured, all access to the folder will be denied.
{% endhint %}

### Notifications

Notifications can alert specified recipients or webhook endpoints when activity occurs within the SFTP connection.

| Notification type         | Setting                  | Options / Description                                         |
| ------------------------- | ------------------------ | ------------------------------------------------------------- |
| **Email Notifications**   | **Send email on**        | **Upload**, **Download**, **Failure**                         |
|                           | **Email Address**        | Enter the email address that should receive notifications.    |
| **Webhook Notifications** | **Send notification on** | **Upload**, **Download**, **Failure**                         |
|                           | **Webhook URI**          | Enter the webhook endpoint that should receive notifications. |

### Folder Encryption

PGP Folder Encryption and Decryption can automatically encrypt or decrypt files when they are transferred through the folder. Encryption keys are configured from the **Encryption Keys** tab in the admin section.

| Setting                       | Description                                              |
| ----------------------------- | -------------------------------------------------------- |
| **Encrypt files on Upload**   | Encrypts files when they are uploaded to the folder.     |
| **Public keys**               | Select the public key used to encrypt uploaded files.    |
| **Decrypt files on Download** | Decrypts files when they are downloaded from the folder. |
| **Private keys**              | Select the private key used to decrypt downloaded files. |

### Approval

Approval settings can require files or shared links associated with the SFTP connection to be reviewed before they become available.

| Setting                               | Description                                                                       |
| ------------------------------------- | --------------------------------------------------------------------------------- |
| **Require approval for shared links** | Users creating shared links will require approval before the link becomes active. |
| **Require approval for uploads**      | Files uploaded to the folder will be staged for approval.                         |

### Transfer Shield

Transfer Shield lets you define the type of content expected within the folder and block or surface files for approval when they do not match those expectations.

| Setting                           | Description                                                                             |
| --------------------------------- | --------------------------------------------------------------------------------------- |
| **Enable Content Classification** | Files uploaded into the folder will be classified by Couchdrop's DLP engine.            |
| **Block unclassified files**      | Denies a file if Couchdrop cannot classify it for any reason.                           |
| **Content Rule Groups**           | Select the content rule group that should be applied to files uploaded into the folder. |

## Using SFTP connections in Couchdrop workflows

Once connected, an external SFTP server can be used as a source or destination alongside Couchdrop’s other transfer methods and Automations.

<table data-search="false"><thead><tr><th width="250.515625">Feature</th><th>How it works with an external SFTP connection</th></tr></thead><tbody><tr><td><strong>Inbound SFTP</strong></td><td>Receive files over Couchdrop SFTP and transfer them to the external SFTP server.</td></tr><tr><td><strong>Mailboxes</strong></td><td>Receive email attachments into Couchdrop and deliver them to the external SFTP server.</td></tr><tr><td><strong>Upload Links</strong></td><td>Collect files through an Upload Link and send them to the external SFTP server.</td></tr><tr><td><strong>Webhooks (HTTPS)</strong></td><td>Receive files through an inbound webhook and route them to the external SFTP server.</td></tr><tr><td><strong>AS2</strong></td><td>Receive files over AS2 and transfer them to the external SFTP server.</td></tr><tr><td><strong>S3 Gateway</strong></td><td>Receive files through Couchdrop’s S3-compatible interface and transfer them to the external SFTP server.</td></tr><tr><td><strong>Automations</strong></td><td>Move files to or from the external SFTP server as part of an scheduled or event-driven workflow automation.</td></tr></tbody></table>

## Frequently Asked Questions

<details>

<summary>Do you support RSA key based authentication</summary>

Yes - Couchdrop can use key based authentication to connect to external SFTP providers. You can upload a private key when configuring the connection.

</details>

<details>

<summary>Can we schedule a copy from one SFTP server to the cloud</summary>

Yes - this is Couchdrop's bread and butter. You can configure a connection to an external SFTP server - select a folder and then automate a transfer using a Scheduled Transfer Automation that polls the SFTP server for new files and then moves them.

</details>

<details>

<summary>Can Couchdrop provide Static IPs that we can whitelist</summary>

Yes - [Contact our support team](/support/technical-support.md) to request static IPs.

</details>

<details>

<summary>Do you support legacy ciphers and keys</summary>

Yes - we can support some restricted legacy ciphers. [Contact our team](broken://pages/8w72LN9IbLUy6081CIId) if you run into connectivity issues.

</details>

<details>

<summary>Are SFTP connections encrypted with Couchdrop</summary>

Absolutely - SFTP as a protocol is very secure and uses asymmetric SSL encryption.

</details>

## Common issues and errors

<details>

<summary>Access denied</summary>

Access denied when browsing, uploading or downloading files generally means that you do not have adequate permissions with the external platform. Contact the external providers support team to make sure you have permissions on their service.

</details>

<details>

<summary>Timeout</summary>

A timeout normally occurs when there a firewall preventing access. Check with the external provider and [talk to our support team](/support/technical-support.md) about static IPs for the external vendor to whitelist.

</details>