Skip to main content

SFTP Debugging

Step-by-step debugging for SFTP issues.

Connection Refused / Timed Out

  1. Verify your public IP: curl https://checkip.amazonaws.com
  2. Ensure your IP is whitelisted on the SFTP server
  3. Test port connectivity:
    • Linux/Mac: nc -zv {server_ip} 22
    • Windows: Test-NetConnection -ComputerName {server_ip} -Port 22
  4. Test network reachability: ping {server_ip}
  5. Check that SFTP port is open in your outbound firewall

Permission Denied / Authentication Failed

  1. Verify username is correct
  2. Ensure password field is blank when using key-based auth
  3. Check private key permissions: chmod 400 {key.pem} (Linux/Mac)
  4. For Windows:
icacls "%USERPROFILE%\.ssh\key.ppk" /inheritance:r
icacls "%USERPROFILE%\.ssh\key.ppk" /grant:r "%username%:(R)"
  1. Ensure private key format matches client (PEM for OpenSSH, PPK for PuTTY/WinSCP)

Debug Logging

  • OpenSSH: ssh -i "path/to/key.pem" user@hostname -vvv
  • WinSCP: WinSCP.exe /log="path/to/logfile.log" /loglevel=5
  • GUI clients: Enable debug logging in Options/Preferences > Logging

Files Not Processing

  1. Check Auto-Sync is enabled in SFTP Profile
  2. Verify source directory path is correct
  3. Check filename matches keyword filter (if configured)
  4. Check filename doesn't match blockword filter
  5. Verify file hasn't been previously uploaded (auto-skipped)
  6. Check Upload Template is assigned and correct

Expected Port Test Results

  • Success: port shows "open" or "succeeded"
  • Connection refused: SFTP service not running on server
  • Connection timed out: IP not whitelisted or firewall blocking

Getting Help

To request help, create a support ticket in the Console: sign in, click the Help button in the bottom-right corner, and complete the Create a Ticket form (Region, Agency, Feature, and a Description). The page you are on is attached automatically, and you can follow updates under My Tickets in the same panel.

In the description, include the server name and Host, the connecting IP addresses, the full error text, your SFTP client and version, and the relevant debug logs.

danger

Never share passwords, SSH private keys, or private key contents in a support ticket or logs.

See also: SFTP Troubleshooting, SFTP Errors