Using SFTP From Boomi

The Boomi platform includes two built-in SFTP Connectors: the older original connector named "SFTP" and the newer connector named "SFTP v2".

If you cannot use the official partner connector for Files.com and you need SFTP from Boomi, use SFTP v2. Do not use the older SFTP connector, which cannot reach Files.com without weakening the encryption on every SFTP connection to your site.

SFTP v2 Connector

SFTP v2 negotiates the following algorithms, all of which are in Files.com's default secure set:

Key Exchange: diffie-hellman-group-exchange-sha256 Encryption: aes128-ctr MAC: hmac-sha1

The hmac-sha1 entry is a message authentication algorithm. Algorithm Roles explains what it means when evaluating the connection against your organization's requirements.

SFTP Connector

The older connector's ecdh-sha2-nistp256 key exchange and hmac-md5 MAC both sit outside Files.com's default secure algorithms, so it cannot connect unless you allow legacy insecure ciphers for your site. That setting is sitewide. Turning it on for one Boomi process expands the algorithms available to all SFTP clients and makes your site ineligible for the Files.com HIPAA BAA program.

Key Exchange: ecdh-sha2-nistp256 Encryption: aes128-ctr MAC: hmac-md5