2283199 - How to perform the initial Setup of the SFTP on Report distributor? - Canvas Reports

• Report Distributor Fails to Deliver to SFTP - Error Initial FTP Connection Check Unsuccessful - SuccessFactors
• A report scheduled is to run everyday to a SFTP site fails and gives the following error:

Encountered a problem while processing E-mail0

• Error message while testing connections:

Initial FTP Connection check unsuccessful. Failed to connect to ***.**.***.**:22 within timeout 120000 ms"

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

• SAP SuccessFactors HXM Suite
• Canvas Reports
• Report Distributor

1. Log in as Admin
2. Go to Report center > View Schedules > Report Distributor
3. Run the bundle throwing the related error

The destination FTP server is refusing the connection. The message No connection could be made because the target machine actively refused it is well-known

An example of the internal logs:

22-Sep-2015 05:29:40 ERROR System.Net.Sockets.SocketException (0x80004005): No connection could be made because the target machine actively refused it. **-**-20** **:**:** ERROR System.Exception: Authentication failed

Most common reasons:

• The destination IP has changed from the one configured in Analytics earlier
• SFTP Port 22 is not being used
• The source server (SFSF in this case) has to be added to the destination network's firewall

The allowlisting must be set correctly on both ends.

As per our security policy, outbound connections to external/third-party sites are blocked on SF datacenters by default. Therefore, when setting up outbound connection to new external sites, you will need first request their destination IP/URLs be allowlisted on the corresponding SF datacenter end.

The allowlisting can be requested by raising a support ticket to LOD-SF-ANA-RDT and the information below must be included in the ticket:

For external SFTP:

• SFTP IP address;
• SFTP Hostname;
• Business justification on why you need this allowlisting;
  OBS.: The standard Destination Port is 22. No other custom ports will be allowed.

The SAP support team will create an internal request to SF Operations and SF Network teams to include your endpoint IP or URL in our datacenter allowlist.

IMPORTANT NOTES:

• Remember to allowlist our SF datacenter IPs in your external site end, if it has network restrictions too (refer to the KBA 2696182).
• This allowlisting is not required for SF-provided SFTP accounts.
• This allowlisting is not required for DC33. All outbound connections are allowed in DC33 by default.

OBS.: For SAP support, check the internal KBA 3251227 for instructions.

• 2276603 - How to Schedule and Use the Report Distributor in SuccessFactors
• 2696182 - Report Distributor (WFA) - Public IP Address to be allow listed at 3rd Party SFTP
• 3225188 - Is it possible to configure multiple SFTPs for Canvas Report Schedules?

SF, success factors, plt, platform, bizx, biz x, online, ORD, Analytics, port, number, change, FTP, Schedule, time out, block, allow list, block, list, center, RPT, ANA, e-mail , KBA , LOD-SF-ANA-RDT , Report Distributor (Advanced Reporting, ORD) , LOD-SF-ANA-ORD , Online Report Designer , Problem