FTPS Vs HTTPS

Former Member · ‎2008 May 19

Hi guys,

I have two options . either to use file adapter or SOAP adapter.

Can you pls tell me whether FTPS transport protocol is more secure or HTTPS so that i can choose from FILE or SOAP adapter

points will be rewarded

Former Member · ‎2008 May 19

HI,

FTPS (File Transfer Protocol Using SSL/TLS):

This is a built-in feature of File adapter in XI. But SAP Java Cryptographic Toolkit must be deployed as a prerequisite. (Refer to note https://service.sap.com/sap/support/notes/821267 Question 28). By default following ports are used:

Implict FTPs 990 (Control) and 989 (Data)

Explicit FTPs 21 (Control) and 20 (Data)

Both use cases can be combined with active and passive mode.

Advantages:

Direct transfer of files to/from third-party systems. It is not required to store the files in the XI server temporarily.

Built-In feature from XI File adapter

No extra effort in development and maintenance of Unix Script.

Centralized Monitoring tool from XI

FTPS uses certificates and therefore can take advantage of "chains of trust" paradigm facilitated through Certificate Authorities. This paradigm makes it possible for two entities to establish a trust relationship without directly exchanging security information, which is important for some applications.

Disadvantages:

Requires opening multiple ports forenabling SSLin the firewall. So there are multiple holes in the corporate firewall.

Not every FTP server supports FTPS and many that do, require a configuration change to activate the FTPS protocol extension.

Cryptographic toolkit should be installed in XI system though it is not very complex or expensive.

check the below weblog:

/people/krishna.moorthyp/blog/2007/07/31/sftp-vs-ftps-in-sap-pi

http://help.sap.com/saphelp_nw2004s/helpdata/en/43/0e16bfd7b021aee10000000a1553f6/frameset.htm

Go thro the links for https

You can use the HTTP adapter. Refer to following SDN TV demo of the HHTP adapter for details steps involved into it.

https://media.sdn.sap.com/SDNTV/main.asp?mediaId=107

HTTPS using XMLSPY

http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm

The HTTPS configuration data of the Adapter Engines has to be configured in the SLD.

More Information in the "SAP Security Guide XI"

http://help.sap.com/saphelp_nw04/helpdata/de/f7/c2953fc405330ee10000000a114084/frameset.htm

http://help.sap.com/saphelp_nw04/helpdata/en/43/64db4daf9f30b4e10000000a11466f/content.htm

Under Security Check for Inbound Messages, you can specify which HTTP Security Level is to be assumed for incoming messages. You can choose from the following security levels:

○ HTTP (default value)

○ HTTPS without client authentication

○ HTTPS with client authentication

http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm

http://help.sap.com/saphelp_nw04/helpdata/en/fc/5ad93f130f9215e10000000a155106/frameset.htm

https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/d23cbe11-0d01-0010-5287-873...

http://help.sap.com/saphelp_nw04/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm

http://help.sap.com/saphelp_nw04/helpdata/en/65/6a563cef658a06e10000000a11405a/content.htm

http://help.sap.com/saphelp_nw04/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm

Hope this will help you .....

http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm

http://help.sap.com/saphelp_nw04/helpdata/en/02/6d5c034c182e4fbe7bfd25c2b56f9b/frameset.htm