The FTP-SFTP conversion and transparent FTP tunneling configurations are made in the Connection Broker configuration for the SSH Tectia ConnectSecure. The configuration can be made centrally using SSH Tectia Manager. The configuration is based on filter rules, defined by application name, hostname, IP address, TCP port or port ranges.
In this example:
Connections to z/OS server are secured using FTP-SFTP conversion, and the destination is defined in the selected profile.
All the other FTP connections are secured using transparent FTP tunneling, and the user name and destination host name are picked from the originating FTP client application. The configuration allows falling back to conventional FTP service, in case the FTP tunneling connection setup fails for some reason.
The rules are read and applied in the order they are listed, so place the more specific rules first. The configurations are shown in the Transparent Tunneling - Filters view: