SCP/SFTP Support for Backups
Need support for SCP/SFTP file transfers for backups with certs or TFA tokens.
Is there any plan to implement this in the near future?
We're almost three *YEARS* since a comment from the Sophos Research & Ideas Laboratory.
Where is this feature?
FTP isn't a secure way to transport a backup, and neither is e-mail.
What's the hold-up?
SFTP ánd FTPS (implicit or explicit, both prefered) for backups should be standard by now.
I would like to see both options: SFTP (over ssh) and FTPS (FTP with SSL/TLS) available for backups. Plain FTP is insecure, as it transfers the login credentials over cleartext. Additionally, it is easier (and less expensive) to setup up a SFTP endpoint in Azure for storing the backups in Blob Storage, than setting up an FTP server in Azure, which has to run in a VM, thus accruing more cost.
AdminRich Baldry (Senior Product Manager, Network Security Group, Sophos Features & Ideas Laboratory) commented
To be clear - by SFTP you mean the protocol that runs over SSH, not FTPS which runs over SSL/TLS.
Please enable scheduled backups and also the ability to do it over SFTP so data is transmitted securely.