When the environment is complex, or IPs are frequently changing/possibly unknown to an Administrator, it might be easier to configure ASA to use the Interface name rather than a specific IP address.

When installing the Agent, use AccessInterface as a Configuration Option in the sftd.yaml file, as opposed to AccessAddress.

• Advanced Server Access (ASA)
• Okta Privileged Access (OPA)

When specifying the AccessAddress in the configuration, this specifies the IP address that clients will use when connecting to this host, which might be limiting to an admin if the specific IP address is unknown.

• For hosts with multiple interfaces or IP addresses, or when the IP address is unknown, the AccessInterface(ASA) / AccessInterface(OPA)  configuration parameter specifies the interface that clients will use when connecting to this host.
• When installing the agent, use the AccessInterface configuration parameter to specify which Interface will be used when connecting via ASA.
• Name the Interface, and ASA will use a string match to what exists on the target Host.