FTPS Vs HTTPS

Hi guys,
I have two options . either to use file adapter or SOAP adapter.
Can you pls tell me whether FTPS transport protocol is more secure or HTTPS so that i can choose from FILE or SOAP adapter
points will be rewarded

HI,
FTPS (File Transfer Protocol Using SSL/TLS):
This is a built-in feature of File adapter in XI. But SAP Java Cryptographic Toolkit must be deployed as a prerequisite. (Refer to note https://service.sap.com/sap/support/notes/821267 Question 28). By default following ports are used:
Implict FTPs 990 (Control) and 989 (Data)
Explicit FTPs 21 (Control) and 20 (Data)
Both use cases can be combined with active and passive mode.
Advantages:
Direct transfer of files to/from third-party systems. It is not required to store the files in the XI server temporarily.
Built-In feature from XI File adapter
No extra effort in development and maintenance of Unix Script.
Centralized Monitoring tool from XI
FTPS uses certificates and therefore can take advantage of "chains of trust" paradigm facilitated through Certificate Authorities. This paradigm makes it possible for two entities to establish a trust relationship without directly exchanging security information, which is important for some applications.
Disadvantages:
Requires opening multiple ports forenabling SSLin the firewall. So there are multiple holes in the corporate firewall.
Not every FTP server supports FTPS and many that do, require a configuration change to activate the FTPS protocol extension.
Cryptographic toolkit should be installed in XI system though it is not very complex or expensive.
check the below weblog:
/people/krishna.moorthyp/blog/2007/07/31/sftp-vs-ftps-in-sap-pi
http://help.sap.com/saphelp_nw2004s/helpdata/en/43/0e16bfd7b021aee10000000a1553f6/frameset.htm
Go thro the links for https
You can use the HTTP adapter. Refer to following SDN TV demo of the HHTP adapter for details steps involved into it.
https://media.sdn.sap.com/SDNTV/main.asp?mediaId=107
HTTPS using XMLSPY
http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm
The HTTPS configuration data of the Adapter Engines has to be configured in the SLD.
More Information in the "SAP Security Guide XI"
http://help.sap.com/saphelp_nw04/helpdata/de/f7/c2953fc405330ee10000000a114084/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/43/64db4daf9f30b4e10000000a11466f/content.htm
Under Security Check for Inbound Messages, you can specify which HTTP Security Level is to be assumed for incoming messages. You can choose from the following security levels:
○ HTTP (default value)
○ HTTPS without client authentication
○ HTTPS with client authentication
http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/fc/5ad93f130f9215e10000000a155106/frameset.htm
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/d23cbe11-0d01-0010-5287-873a22024f79
http://help.sap.com/saphelp_nw04/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/65/6a563cef658a06e10000000a11405a/content.htm
http://help.sap.com/saphelp_nw04/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm
Hope this will help you .....
http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/02/6d5c034c182e4fbe7bfd25c2b56f9b/frameset.htm
Note: reward points if solution found helpfull
Regards
Chandrakanth.k

Similar Messages

WCCP on ASA for FTP over HTTP

Hello,
We have a WSA appliance that we have in explicit mode and want to configure as transparent. The protocols we cache and analyze with WSA are HTTP, HTTPS, native FTP and FTP over HTTP.
Is there a service number on WCCP for FTP over HTTP protocol? Or it is included within HTTP?
Thanks a lot in advance.
Best regards,
Igor

Igor,
The service number 60 (ftp-native service) only applies to transparent redirection of FTP native requests and does not apply to FTP-over-HTTP requests.
On the other hand; the Content Engine listens for redirected HTTP requests on the standard HTTP port (default port 80). To enable the Content Engine to listen for WCCP-intercepted HTTP traffic on ports other than the default port, configure the custom-web-cache service (98 and 99) or a user-defined WCCP service (services 90 to 97).
I hope this helps.
Regards,
Juan Lombana
Please rate helpful posts.

Ftp over http authentication

Hi,
we have problem opening FTP sites that require authentication.
When I try to open a ftp site, example ftp://site.com, I get this message in the browser :
Authentication is required by the FTP server ( ftpserver.com ). A valid user ID and password must be entered when prompted.
In some cases, the FTP server may limit the number of anonymous connections. If you usually connect to this server as an anonymous user, please try again later.
But I didn't receive authentication prompt at all
I think we didn't have issues with the previous versions...

Are you using IE by chance? If yes, try accessing the FTP server using a different browser. IE has a known issue that such that it doesn't prompt end users to enter FTP server credentials when the user goes through any proxy (not just the WSA). We just decided to add this to the WSA release notes as a "known issue" with the different workarounds listed. You'll see it in the next version of the 7.5 release notes when that comes out someday. Here's what the bug write-up will say:
Defect ID 5463
Users cannot access FTP servers that require server authentication using FTP over HTTP with Internet Explorer. This is a known issue with Internet Explorer when communicating with web proxies. This is due to Internet Explorer never prompting users to enter the server authentication credentials.
Workaround: To access FTP servers that require server authentication, use one of the following workarounds:
Use a different browser, such as FireFox or Chrome, to access the FTP server.
Use an FTP client that uses native FTP to access the FTP server.
If users must use Internet Explorer, they can prepend the username and password into the URL. For example: ftp://USERNAME:[email protected]@ftp.example.com
54636

Ftp and http access over XDB repository is not allowed...

When I try to execute the following command on a reasonably fresh Oracle 11 installation:
insert into "XMLTEST" ( "name", "xmlfof" ) values ( 'small', DBMS_XDB.GETCONTENTXMLTYPE('/public/small.xml') );
-- The schema is correctly registered, the file "small.xml" is in the /public repository folder, the user has every conceivable role and priviledge
-- http access works fine from a remote location, tried to execute the command on the server and from remote system...
I get the following error message:
ORA-31020: Der Vorgang ist nicht zulässig, Ursache: For security reasons, ftp and http access over XDB repository is not allowed on server side ORA-06512: in "XDB.DBMS_XDB", Zeile 1915
Searching for an answer on the forum didn't produce any concreate explanation... Does anyone have any idea how to solve this problem?

As it turns out, the XML file contained a reference to a DTD at an external web-site, which caused the problem - it was identical to that described here:
Re: ORA-31020 when using XML with external DTD or entities
After removing the reference, everything works perfectly...

Scripting with FTP and HTTP

Hi All,
To help us with future planning, we would like to get a feel for how many developers are using the FTP and HTTP objects that are available with scripting in CS3 (through webaccesslib). If you are using them could you send me a quick email describing how you use the component? My email address is [email protected]
Thanks in advance.
Alan Morris
Dev Tech Engineer
Adobe Systems

Yeah, this is so aggrevating!
Adobe builds all of these cool ideas, then doesnt test them.
The HTTPConnection object does not do POST at all. I have tried nearly every possibility. The documentation is either way off or the object just does not work. I can see the post in raw form and the POST variables are not coming across.
After working on this for a few hours i thought to myself, hey maybe i should just create a flash pane instead and load the files into it, then have the flash object upload. Well i ran into a big fat wall there too! As it is with patchpanel and bridge, these technologies only accept swf objects. This whole concept of using SWF and crossscripting has a huge flaw. The SWF file's security format does not allow for local file access for doing simple things like upload. If i can't synchronize file data to web based clouds, then i cant do much worth talking about.
I love these products and their possibilities but i have to have the ability to communicate with the world. HTTP is the way!
Also a side note, FTP is an insecure/inflexible solution and looks like a lot more time was spent on this aspect of the scriptable product.
PLEASE HELP ADOBE!!!!!

Can anyone help me answer whether Robohelp has a secure ftp (sftp) or secure http connection protocols? it only lists ftp or http, but not specifying if secure? Thanks.

Can anyone help me answer whether Robohelp has a secure ftp (sftp) or secure http connection protocols? it only lists ftp or http, but not specifying if secure? Thanks.

Hello again
First off, sorry for confusing anyone with the WYSIWYG reference. Failed attempt at humor. Ah, live and learn.
Can you expound on what you mean when you say: But there does seem to be “disagreement” regarding whether RH supports HTTPS?
If you are only referring to this thread, are you sensing "disagreement" because Willam said you can serve content to users?
Here's the deal. I sort of "read between the lines" with your post and made an assumption and it seems I may have needed to ask you to clarify before tossing an answer out. The assumption I made was based on your statement of: it only lists ftp or http
That made me believe you were referring to the Publish section in the Single Source Layout properties. (shown below)
This dialog allows you to specify a protocol used to UPLOAD your generated content to a server.
What Willam was referring to was the END USERS viewing the content AFTER it has been uploaded.
Cheers... Rick

FTP or HTTP

I would like to allow somebody OUTSIDE my home network (actually in a different state) to be able to download a file from my Mac using SFTP (preferred) or HTTP.
When I turn on Web Sharing, it shows my computer's address as being 192.something, which I know is only inside my local network. How would I find out what the address is from outside and which port in my FIOS router do I have to open for SFTP? So I have to make any changes to my Time Capsule's (this is between my computer and the FIOS router) configuration to allow this?

I've not tried this myself, but the FTP and HTTP ports on the computer are "standard." See: "Well Known" TCP and UDP ports used by Apple software products.
In your TC's network configuration you will find the actual IP address assigned to you via your FIOS modem. You will want to check it shortly before you open the access to someone because periodically the address may change unless you've been given a static IP address.
It may be a lot easier to zip the file and email it to your friend.

FTP and HTTP large file ( 300MB) uploads failing

We have two IronPort Web S370 proxy servers in a WCCP Transparent proxy cluster. We are experiencing problems with users who upload large video files where the upload will not complete. Some of the files are 2GB in size, but most are in the hundreds of megabytes size. Files of sizes less than a hundred meg seem to work just fine. Some users are using FTP proxy and some are using HTTP methods, such as YouSendIt.com. We have tried explict proxy settings with some improvment, but it varies by situation.
Is anyone else having problems with users uploading large files and having them fail? If so, any advice?
Thanks,
Chris

Have you got any maximum sizes set in the IronPort Data Security Policies section?
Under Web Security Manager.
Thanks
Chris

Ftp or http or what?

I'm trying to figure out which technology to use. Here's what I need to do:
Currently, my boss goes to a website that displays a login form, and eventually he clicks his way to a listing of URLs to data files that need to be downloaded. This other company posting the information uses servlets to retrieve the data and construct these files dynamically (as far as I can tell). We're going to get much more data in, so I need to automate this process.
I initially assumed I would need to try to open an FTP connection to their site in Java, so I was looking at the Apache Commons Net package. I assume that then I'd have to post the initial forms (login, etc) in Java, and then parse the listing page to find the live URLs to the files. However, I don't want to do this (e.g. learn the Apache Commons Net API) if there's a simpler way. For instance, should I be able to use classes like HttpURLConnection in the java.net API to do all of my interaction with their site? All I know is that when I access their site, it's an https connection. If it's not as easy to use stuff that Sun provides, then by all means I'll try to do it with the Apache package.
I just don't want to start coding if my approach is not right!
Thanks for any advice,
Stephen

you can't browse the site structure use a URLConnection..you have to use FTP to do that. You can however download a file using URL connection
URL url = new URL("ftp//login:[email protected]/subdirectory/filename");
edtFTP offer a simple FTP api (much more simplier than Apache)
example:
FtpClient client = new FTPClient(host, port);
client.login(user, password);
client.debugResponses(false); // switch on or off debug of responses
client.setType(FTPTransferType.ASCII); // binary transfer
client.setConnectMode(FTPConnectMode.PASV);
String dirListing[] = client.dir(".", false); // get directory
etc..
I think it's free
http://www.enterprisedt.com/downloads/ftp/faq.html

Ftp or http mirrors?

What are the pros/cons of using one or the other?

Depending on your situation, one or the other may be firewalled (ie, in a corporate environment) so you would have to use the other (or a proxy).
In theory FTP should be faster, but IME it usually isn't.
EDIT: A HTTP mirror could use redirects to send your requests to other locations. This could be a good thing (tm) or a bad thing (tm) depending on how it is used. I don't recall ever seeing an Arch mirror do this.
Last edited by fukawi2 (2011-02-01 09:25:42)

Ftp or https

so i'm pretty dumb when it comes to understanding how this works. i've got a program that should allow me to connect to some server where we store our stuff online. classic ftp i think it is. however, when i type in our address, it tells me i need an ftp address, but i don't have one of those. the address is an https://st38.startlogic.com and i login from there. what program do i need to be able to upload stuff to startlogic? or am i totally missing the whole thing?

Hi
Ordinarily this would work but it seems the address the OP has been given does not recognize ftp connections.
If you try connecting by keying in ftp://st38.startlogic.com in the Finder (command+K from the Go Menu) the Finder returns a 'The Finder cannot complete the operation because some data in "ftp://st38.startlogic.com' could not be read or written. (Error code -36). You get the same error if you launch a browser and key in the same thing in the url. The only thing that seems to work as far as I can see based on the OPs information is by keying in https://st38.startlogic.com:8087/panel/index in the url of any web browser that the OP may be using. Interestingly if you use anything other than Firefox on the mac platform you get a message telling you that the site does not currently support those applications. If you key in: http://st38.startlogic.com:8087/panel/index in the url you receive a 'Bad Request' error stating that a connection is being made using plain HTTP to an SSL-enabled server port with a redirect to use the secure port (https). Now I know you know this but it seems that the OP probably does not and is (perhaps) confused by the jargon being used and/or the original instructions given him that prompted this post in the first place.
From what I can see https://st38.startlogic.com:8087/panel/index appears to be a secure portal for building a web-site or for possibly uploading/downloading from a secure website.

Ftp not http

how do i stop safari from putting the http:// part in front of an address i type into the address bar? i want to go to an ftp site, not http://ftp.......

If you want to view a FTP site outside the Finder, you need to use another web browser.
Or a standalone FTP program, which might be more helpful if you're having difficulties getting into your FTP sites.
Cyberduck is a popular free FTP program. I haven't used it myself, but many here on the Apple forums recommend it and report being happy with it. Other well-liked (but not free) FTP programs are Transmit (my current favorite) and Fetch. And there are many others - just search Version Tracker or Macupdate if you want to look at all of the options.
One thing to check, since you're having problems: If you're behind a firewall make sure to set the FTP program to use passive FTP.

Oracle manager can't imports from ftp and http servers

My VM Manager is "Oracle VM Manager 3.2.8.733 my agent in the Oracle VM server is ovs-agent 3.2.6-b729. The connection between my manager and my server is done but the manger can't downloads the ovm templates and ISOs from both a ftp server and a http server that I can connect and download from it with a browser. the event status of import is In progress since two days. while I look up in my repository a temporary directory is created and the download is doing but it was deleted after that. thaks to help me

My VM Manager is "Oracle VM Manager 3.2.8.733 my agent in the Oracle VM server is ovs-agent 3.2.6-b729. The connection between my manager and my server is done but the manger can't downloads the ovm templates and ISOs from both a ftp server and a http server that I can connect and download from it with a browser. the event status of import is In progress since two days. while I look up in my repository a temporary directory is created and the download is doing but it was deleted after that. thaks to help me

Ftp over http proxy

Hi Experts,
As per sap notes using n/w proxy in ftp adapter is not possible.
Please let me know what are the possible workarounds.
Regards,
Ayush

hi
please check your F/W settings.
and if you can setup FTP on the PI server, you should test on the PI server as FTP server.
youll find waht is the problem.
naoki

How to disable FTP, WebDAV, HTTP

Hi,
subject said it all. :-)
How can I disable or switch off these protocols and the protocol service. They are a security risk to some DBAs. I can't find a hint in the manuals.
Thanx for your answers,
Markus

Protocol access should not be regarded as a security risk as there is no access other than to the public folder of XML DB repository for unauthenticated users. If the DBA has correctly secured the database then a database user cannot access anything other than what he access to via SQL
To disable the protocols set the port numbers to 0 in the xdbconfig.xml document or via OEM.

FTPS Vs HTTPS

Similar Messages

Maybe you are looking for