Supported Cipher Suites and Host Key Types

SFTP connections are encrypted. For a connection to work, the target server must support at least one of the following ciphers:

The aes*-ctr values use AES in CTR mode with 128-, 192-, or 256-bit keys.

Use the following table to check your SFTP server or provider's interoperability:

Communication protocol

NetSuite supports SFTP (SSH File Transfer Protocol).

Your SFTP server must support cryptographic algorithms. Configure your server to use at least one of the following:

SSH encrypts the entire SFTP session; files aren't additionally encrypted unless you encrypt the file contents themselves.

Authentication mechanism

Username

Password

Password/SSH key with or without passphrase

SSH host key

With each connection request, you must supply the host key. Any host key changes need to be managed manually.

GUID

The password GUID should be a value generated by a credential field from a Suitelet using Form.addCredentialField(options).

The password GUID field's originating credential field must include the SFTP domain on the restrictToDomains parameter.

The password GUID field's originating credential field must include the script utilizing the password GUID on the restrictToScriptIds parameter.

Signature algorithms

RSA:

DSA:

EC:

EDDSA:

Firewall policy is at the discretion of your SFTP service provider.