SFTP Gateway Professional vs BYOL
TLDR - Quick Summary
What: How the SFTP Gateway Professional and SFTP Gateway (BYOL) listings differ, and why we recommend BYOL
Professional: License is baked into the listing — Azure bills a $0.15/hour cloud software fee on top of your infrastructure
BYOL: No cloud software fees — deploy for free, then start a 30-day trial or purchase a license from Thorn Technologies
Deprecation: Professional is in Long-Term Support now — End of Maintenance June 2027, End of Life June 2028 — migrating to BYOL is the standard path forward
Migration: Your configuration travels in a single backup file; check
application.propertiesandwebsite.conffor custom settings
Overview
SFTP Gateway is available on the Azure Marketplace under two listings that run the same software, but with two different ways of paying for it:
- SFTP Gateway Professional — the license is baked into the listing, and Azure charges an hourly cloud software fee alongside your infrastructure costs.
- SFTP Gateway (BYOL) — the listing itself is free with no cloud software fees. You bring your own license, purchased directly from Thorn Technologies (with a free 30-day trial to get started).
This article explains the difference between the two listings, the upcoming deprecation of the Professional listing, and how to migrate an existing Professional deployment to BYOL.
The two listings
SFTP Gateway Professional
The SFTP Gateway Professional listing on the Azure Marketplace:

SFTP Gateway (BYOL)
The SFTP Gateway (BYOL) listing on the Azure Marketplace:

Pricing: what you pay, and where
Professional — license included, billed hourly by Azure
With Professional, you never handle a license key — it's built into the VM image. In exchange, Azure bills a $0.15 per VM-hour cloud software fee on your Azure invoice (the "Starting at $0.15" you see on the listing), on top of the underlying VM and storage costs. This fee accrues for every hour the VM runs, whether or not it's actively transferring files.
BYOL — free listing, license from Thorn Technologies
With BYOL, the marketplace listing shows Bring your own license — there is no software fee, and your Azure invoice only ever shows your infrastructure costs. Instead, you license the software directly from us:
- Start a free 30-day trial right from the web admin interface — no license key required.
- When you're ready, purchase a license that fits your user count and support needs.
Because the license comes from Thorn Technologies rather than the cloud marketplace, BYOL also gives you more flexibility: the same license model applies across AWS, Azure, and Google Cloud, and pricing conversations happen with a person instead of a metering dimension.
Questions about license pricing? Book a call with our Sales team or email us at sales@thorntech.com — we'll match you with the license tier that fits your deployment.
Professional is being deprecated
The Professional listing has entered Long-Term Support (LTS) and is on a published deprecation timeline. See our Version Support Calendar for the full schedule across all versions and listings.
| Milestone | Date | What it means |
|---|---|---|
| Long-Term Support | June 2026 (current stage) | Critical security patches only — no new features |
| End of Maintenance | June 2027 | No more patches of any kind — technical support only |
| End of Life | June 2028 | No support, and the listing is removed from the marketplace |
New versions are published exclusively to the BYOL listing. Migrating to a BYOL deployment is the standard procedure going forward, and all new features and releases will continue on the BYOL listing.
We strongly recommend migrating well ahead of the deprecation date. Migrating early means:
- You upgrade on your own schedule, with time to test — not against a deadline.
- You stop paying the hourly cloud software fee as soon as your license is in place.
- Our support team has full headroom to help if anything comes up during your migration.
Migrating from Professional to BYOL
A migration is a new BYOL deployment plus a configuration restore — you cannot convert a Professional VM in place. The good news: all of your configuration (Users, Folders, Cloud Connections, and Settings) travels in a single backup file.
1. Export a backup from your Professional VM
- Log in to your SFTP Gateway Professional web admin interface.
- Navigate to Settings > Backup and Recovery.
- Click Export > Export Backup File and save the
yamlfile somewhere secure — it contains sensitive configuration information.

For detailed backup instructions, see the backup section of our upgrade guide.
2. Check for custom configuration
The backup file covers everything configured through the web admin interface. Two places live outside the backup file, so check them before you migrate:
Custom application properties — if you (or our support team) ever customized
/opt/sftpgw/application.properties (custom ports, timeouts, upload tuning, CORS restrictions,
etc.), those changes must be re-applied manually on the new VM. SSH in and review the file:
ssh -p 2222 azureuser@<professional-vm-ip>
cat /opt/sftpgw/application.properties
See our Application Properties reference for what each property does.
Custom SSL certificates — if you installed your own SSL certificate for the web admin
interface, the certificate and nginx configuration are not part of the backup. Check
/etc/nginx/sites-available/website.conf for certificate paths, and copy the certificate, key,
and any customized configuration over to the new VM.
Note: To keep SFTP clients from seeing a host-key warning after cutover, you can also copy the SSH host keys (
/opt/sftpgw/ssh_host*) from the old VM to the new one. See our host key migration guide for the procedure.
3. Deploy a new BYOL VM
Deploy a fresh VM from the SFTP Gateway (BYOL) listing — the listing is free, and the portal's Create VM wizard is the same one you know from Professional. See Getting Started with SFTP Gateway on Azure for a full walkthrough.
4. Restore your backup and license the new VM
- Sign in to the new VM's web admin interface.
- Start your 30-day free trial (or activate a purchased license) when prompted.
- Navigate to Settings > Backup and Recovery, choose your backup file, and click Import.
- Re-apply any custom
application.propertiesvalues or SSL certificates from step 2.

For detailed restore instructions, see the restore section of our upgrade guide.
5. Cut over and decommission
- Point your SFTP clients at the new VM — see our IP migration guide to move the public IP so clients don't need to change anything.
- Verify users can connect and files land in your Blob Storage container.
- Once you're confident, delete the old Professional VM and its associated resources (disks, NIC, public IP) — the hourly software fee stops as soon as the VM is gone.
Need help?
If you have questions about licensing or pricing, book a call with our Sales team or email sales@thorntech.com. For hands-on help with a migration, contact support@thorntech.com.