Skip to main content

SFTP Debugging

Step-by-step debugging for SFTP issues.

Connection Refused / Timed Out​

  1. Verify the public IP: curl https://checkip.amazonaws.com
  2. Ensure the IP is whitelisted on the SFTP server
  3. Test port connectivity:
    • Linux/Mac: nc -zv {server_ip} 22
    • Windows: Test-NetConnection -ComputerName {server_ip} -Port 22
  4. Test network reachability: ping {server_ip}
  5. Check that SFTP port is open in the outbound firewall

Permission Denied / Authentication Failed​

  1. Verify username is correct
  2. Ensure password field is blank when using key-based auth
  3. Check private key permissions: chmod 400 {key.pem} (Linux/Mac)
  4. For Windows:
icacls "%USERPROFILE%\.ssh\key.ppk" /inheritance:r
icacls "%USERPROFILE%\.ssh\key.ppk" /grant:r "%username%:(R)"
  1. Ensure private key format matches client (PEM for OpenSSH, PPK for PuTTY/WinSCP)

Debug Logging​

  • OpenSSH: ssh -i "path/to/key.pem" user@hostname -vvv
  • WinSCP: WinSCP.exe /log="path/to/logfile.log" /loglevel=5
  • GUI clients: Enable debug logging in Options/Preferences > Logging

Files Not Processing​

  1. Check Auto-Sync is enabled in SFTP Profile
  2. Verify source directory path is correct
  3. Check filename matches keyword filter (if configured)
  4. Check filename doesn't match blockword filter
  5. Verify file hasn't been previously uploaded (auto-skipped)
  6. Check Upload Template is assigned and correct

Expected Port Test Results​

  • Success: port shows "open" or "succeeded"
  • Connection refused: SFTP service not running on server
  • Connection timed out: IP not whitelisted or firewall blocking

Getting Help​

To request help, create a support ticket in the Console: sign in, click the Help button in the bottom-right corner, and complete the Create a Ticket form (Region, Agency, Feature, and a Description). The current page is attached automatically, and updates appear under My Tickets in the same panel.

In the description, include the server name and Host, the connecting IP addresses, the full error text, the SFTP client and version, and the relevant debug logs.

danger

Never share passwords, SSH private keys, or private key contents in a support ticket or logs.

See also: SFTP Troubleshooting, SFTP Errors