Using SFTP From Boomi

The Boomi platform includes two built-in SFTP Connectors: the older original connector named "SFTP" and the newer connector named "SFTP v2".

If you cannot use the official partner connector for Files.com and you need SFTP from Boomi, use SFTP v2. Do not use the older SFTP connector, which cannot reach Files.com without weakening the encryption on every SFTP connection to your site.

SFTP v2 Connector

SFTP v2 negotiates the following algorithms, all of which are in Files.com's default secure set:

Key Exchange: diffie-hellman-group-exchange-sha256 Encryption: aes128-ctr MAC: hmac-sha1

A vulnerability scanner may flag the hmac-sha1 MAC on these connections. Files.com supports it deliberately, and A Note About HMAC-SHA1 explains why it remains cryptographically sound in this context.

SFTP Connector

The older connector's ecdh-sha2-nistp256 key exchange and hmac-md5 MAC both sit outside Files.com's default secure algorithms, so it cannot connect unless you allow legacy insecure ciphers for your site. That setting is sitewide. Turning it on for one Boomi process weakens every SFTP connection you have and makes your site ineligible for the Files.com HIPAA BAA program.

Key Exchange: ecdh-sha2-nistp256 Encryption: aes128-ctr MAC: hmac-md5