Usage of SAP PI's sFTP adapter vs Managed file Transfer (MFT) system

[Former Member]

Hello Experts,

It would be interesting to get your expert views and ideas on the usage of sFTP adapter as against the Managed File Transfer (MFT) system.

we have file interfaces to integrate with external systems. The landscape has a Decentralized adapter engine installed in the DMZ. Currently, for external system integration, SAP PI uses the DAE and places the files in the internal server in the DMZ.

Subsequently, the MFT system picks the files from the internal server and drops them on the target directory.

Recently, we have upgraded to 7.4 dual stack system which means we now have the inbuilt sFTP capabilities to integrate with external systems.

Now here is my question,

we have further requirements to setup new interfaces with external receivers. In such a case, would it be a good design to use the sFTP adapter to drop the files directly to the external system instead of going through the MFT layer.

Assuming that the MFT is merely used for the transfer of files, can i get your viewpoints, the pros and cons of eliminating the MFT layer for the new file interfaces?

Thanks for your valuable time and inputs.

Thanks,

Sundar 

[nitindeshpande · Accepted solution]

Hi Sundar,

Yes, you can happily go ahead with SFTP adapter and remove the MFT system. As SFTP adapter has in-built all the security features like communication over Port 22, certificate authentication, server fingerprint etc.

Hence my suggestion is to go with SFTP over MFT.

Regards,

Nitin

[Former Member · Accepted solution]

Hi Nitin,

Thanks for your inputs. Much appreciated!

I have some more questions to determine the usage of sFTP over MFT, please let me know your valuable views and throw some light

1. Using sFTP, Is it secured enough to push files to remote servers across the internet? If so, how is this achieved?

2. What are the possibilities to encrypt & decrypt the files transmitted?

3. Are there limitations of the size of files that can be transmitted, the files that our systems would produce would be in the range of 300 to 700 MBs but never over a GB. At present the MFT solution in place transfers such large files without any issue and with reasonably good speed. Should it be a concern when sFTP is used to transfer large files across network?

4. Would I have to worry about guaranteed delivery of files? Presently the MFT does a good job in this aspect.

5. The MFT has features to expire data (if required, due to security reasons) after a specified time frame. Can the same thing be achieved by any mechanism in SAP PI?

6. What are the fail-over capabilities, in case a file while in transfer process is discontinued / interrupted?

7. To set-up new interfaces with sFTP adapter, what would be the list of essential set-up required both on the sender network and the receiver network to establish sFTP in place?

It also would be very interesting and useful to know the experiences and challenges faced from people who have had similar requirements in their projects

Appreciate your point of views and happy to incorporate the suggestions. Thanks for your valuable inputs and time!!

Thanks,

Sundar

[iaki_vila · Accepted solution]

Hi Sundar,

1. Using sFTP, Is it secured enough to push files to remote servers across the internet? If so, how is this achieved?

I haven't so clear this question. The adapter makes a SFTP connection like another SFTP tool.

Check this link: Configuring the Communication Channels with the SFTP Adapter - SAP NetWeaver Process Integration, se...

2. What are the possibilities to encrypt & decrypt the files transmitted?

Check this link Configuring the Encryption PGP Module - SAP NetWeaver Process Integration, secure connectivity add-o...

3. Are there limitations of the size of files that can be transmitted, the files that our systems would produce would be in the range of 300 to 700 MBs but never over a GB. At present the MFT solution in place transfers such large files without any issue and with reasonably good speed. Should it be a concern when sFTP is used to transfer large files across network?

This theme is more related about your PI system. AFAIK there is no limitation under a GB, but your PI performance could be affected. Depending your PI memory, sometimes it is better to add memory and extra-node or a de-central adapter engine.

5. The MFT has features to expire data (if required, due to security reasons) after a specified time frame. Can the same thing be achieved by any mechanism in SAP PI?

AFAIK you can set timeout parameters in SAP PI.

7. To set-up new interfaces with sFTP adapter, what would be the list of essential set-up required both on the sender network and the receiver network to establish sFTP in place?

There are some links to start to use this adapter: http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/305eeb5b-81e7-2f10-d8aa-9216de04c...

As this adapter is integrated in PI, you can add own java modules to extend its utility. Check this example with the file adapter: http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c0b39e65-981e-2b10-1c9c-fc3f8e674...

Regards.

[Former Member · Accepted solution]

Hi Iñaki, Thanks for your helpful comments!

[former_member203641 · Accepted solution]

Hi Sundar,

Answering on

1. Using sFTP, Is it secured enough to push files to remote servers across the internet? If so, how is this achieved?

I think yes as its sFTP and i would say using key based authentication would be more secure, and I beleive this also depends on the security standards of proxy which you would be using to connect to remote servers across the internet.

Thanks,

Amit