WinSCP’s Tunnel Page Selects the SSH Jump Host

When the reachable intermediary is an SSH jump host, WinSCP can build the tunnel for an SFTP or SCP session.

1. On the main Login dialog, select SFTP or SCP and enter the final server’s hostname, port and account.
2. Open Advanced Site Settings → Connection → Tunnel.
3. Enable “Connect through SSH tunnel” and enter the reachable intermediary in “Host to setup tunnel on”, with that host’s SSH account and authentication settings.

WinSCP first connects to the intermediary and asks it to open the forwarded connection to the final server. Use a destination address reachable from that intermediary; entering the jump host again as the final server selects a different target.

The two accounts and host identities can be different. Preserve verification of the intended SSH hosts and use the appropriate key for each login.

The built-in tunnel inherits some proxy and SSH settings from the main session. WinSCP directs more complex arrangements, including multiple hops or non-default SSH requirements, to an external tunnel tool. Its built-in tunneling interface is available for SFTP and SCP, not natively for FTP, WebDAV or S3.