SFTP Support for CVP

[nsarai]

Cisco CVP currently supports FTP for IIS media server. With all the security vulnerabilities getting reported every other day, does any one know when would this be switched to SFTP? Thanks!

[bill.king1]

Can you clarify what specifically you mean? The element specifications for say CVP 11.6 specifically outline that it supports SFTP for things like the Record element? Here's the link to it.

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/customer_voice_portal/cvp11_6/programming/guide/ccvp_b_element-specifications-for-cisco-unified-cvp11-6/ccvp_b_element-specifications-for-cisco-unified_chapter_0101010.ht...

[nsarai]

I should have included the link, referring to media server settings. Thanks!

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/customer_voice_portal/cvp_12_5/configuration/guide/ccvp_b_configuration-guide-12-5-1/ccvp_b_configuration-guide-12-5-1_chapter_01010.html#CCVP_RF_MB56985A_00

[janinegraves]

The Record element allows SFTP to one server.
The FTP Client element allow FTP to multiple servers but doesn't allow SFTP. 🙁

[bill.king1]

Hi @janinegraves, it looks like this is still the case in 12.6.2, correct? So the default RecordAgentGreeting doesn't support sftp for instance. Have you heard of any defects/enhancement requests to allow it?

[janinegraves]

I only have 12.6.1 and it's still the case that the FTP client element
does not support SFTP yet.
I know @sambarnhouse at Cisco provided Cisco BU with a SFTP element, but
I guess they haven't implemented it yet.

[Gerry O'Rourke]

I can confirm that CVP Call Studio 12.6.2 Build 115 (which is the latest ES18 build) does NOT support SFTP with the FTP_Client element. 

Its disappointing - as the Record element which only uploads to a single location is not very useful.
A separate element - like the FTP_Client can be re-used multiple times to upload the files to multiple servers and we can used it to upload the audio recorded in the Record Element (It even supports uploading to multiple servers)

But only supports FTP - which is typically not allowed by customers. i.e. even if FTP is locked down to use anonymous and only allow from certain IP addresses.

It would be great if the BU got SFTP added to the FTP_Client element.

Gerry

[therealptindall]

Gerry,

In the meantime why not use the REST client element with a POST and multipart body.   There's a body construct example here https://app.box.com/s/j4hhnozpa6vvl83ddvb1fh7tun2ojlj4

Paul

[Gerry O'Rourke]

Thanks Paul.

Lovely to hear from you! This sounds interesting. Thanks a mil.

Gerry

[david.macias]

I suspect the biggest issue with an SFTP element is the handling of certificates.

david

[bill.king1]

I have a ticket open with Cisco to see if they have this as an enhancement request at least (to have it for SFTP for FTP node, not just Record node). I will let everyone know what they come back with.

[janinegraves]

Bill, in the enhancement request perhaps mention that Cisco employee Sam Barnhouse provided them with the sftp element code about 5 years ago.

[janinegraves]

I'm uploading the java source code for SFTP. You'll need to download the driver jsch-0.1.54.jar from internet (you may need a different version).
You'll have to compile it with your version of java.
No guarantees - test completely before using.

[Gerry O'Rourke]

Janine,

It looks like this java uses the JSch library - which is no longer actively developed.
It will work - but probably not the most ideal library to use any more.
Last update - 2018.

http://www.jcraft.com/jsch/

https://jadaptive.com/java-ssh-library/the-evolution-of-java-ssh-libraries/

Gerry