> Source: [sk82281](https://support.checkpoint.com/results/sk/sk82281)

# sk82281 - How to enable SFTP access on Gaia OS

| Property | Value |
|----------|-------|
| Solution ID | sk82281 |
| Date Created | 2012-08-15 |
| Last Modified | 2021-06-10 |
| Technical Level | General |
| Products | Security Gateway, Multi-Domain Security Management Server |
| Versions | R82.10, R82, R81.20, R82.10, R81.20, R82, R82.20 |
| OS | Gaia |

## Solution

**In release R80.40 and higher, SFTP access is enabled by default.**   

For release R80.30 and lower, do the following to enable SFTP access for each user who does *not* use Clish *cli.sh* as the default shell:

1. Log in to Expert mode:

   *HostName\> expert*
2. Make a backup of the SSHD configuration file:

   *\[Expert@HostName\]# cp /etc/ssh/sshd_config /etc/ssh/sshd_config_ORIGINAL*   

3. Edit the SSHD configuration file in the Vi editor:

   *\[Expert@HostName\]# vi /etc/ssh/sshd_config*   

4. Modify the configuration using *one* of these two options:

   **Note:** For details, refer to the "[sshd_config](http://linux.die.net/man/5/sshd_config)" manual page, in the "*Subsystem*" section.
   * *Either* modify in this way:

     from
     >
     > ```
     > #Subsystem      sftp    /usr/libexec/openssh/sftp-server
     > ```

     to
     >
     > ```
     > Subsystem      sftp    /usr/libexec/openssh/sftp-server
     > ```

   * *Or* modify in this way:

     from
     >
     > ```
     > #Subsystem      sftp    /usr/libexec/openssh/sftp-server
     > ```

     to
     >
     > ```
     > Subsystem      sftp    internal-sftp
     > ```

5. Save the changes and exit the Vi editor.
6. Restart the SSHD service:

   *\[Expert@HostName\]# /etc/init.d/sshd restart*
7. Change the default shell of the selected user from Clish to */bin/bash* as follows*:*
   1. From Clish, run:

      *set user \<username\> shell /bin/bash*
   2. To make the change permanent, run:

      *save config*

**Notes:**

* To change the default shell back to CLISH, run "*set user \<username\> shell /etc/cli.sh* " from CLISH and make the change permanent by running "*save config*" from CLISH.
* You must configure an explicit security rule for SSH access to this Gaia computer on the Security Gateway or Gateway cluster. SFTP operates using SSH.

<br />

<br />

**Related solutions:** [sk52763 - Enabling SCP connectivity on SMB and Branch Office Appliances](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk52763)

<br />

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content