Dear Folks,
I have a scenario where there are multiple operators (companies) reporting to one parent company (you can assume it as a different company altogether). Now, the operators have their secured networks and very stringent security policies. I have a requirement where I have to transfer some data files from these operators site to their parent company (which is on different network).
I am not sure what is the best solution to achieve this. For your reference, I considered following options.
1. Create a secured web service (https service) and deploy it at parent company's network on TMZ/DMZ server. Now, this web service will be on internet so it can be consumed by all operators to transfer their data files. Using this approach operators will receive proper acknowledgment for every file transfer so there is proper handshaking in this approach. This approach has some security concerns from my operators. So, I am not sure how much security we can handle using this approach.
2. Use SFTP. I don't have much insight about how I can use SFTP in my case. I read somewhere that in SFTP sometimes you may not get acknowledgment whether the file is transferred or not. My operators are pushing for this approach but I am not sure how to go about it.
I am not sure what else could be done to achieve a common ground for implementing the solution for this problem. Please note that the security involve in this solution is of utmost priority.
Can anyone please help me out with a optimized approach.
Thanks in advance.
Thanks,
Shivank Sharma