Don’t Just Secure Your File Transfers - Secure Your Files' Contents, Too

If your organisation uses Managed File Transfer to move sensitive data between systems, partners, and cloud environments, you've already made a smart decision. Encryption in transit, access controls, automation, and audit trails are essential in 2026.

But enterprise security teams are increasingly asking: what's actually inside the files you're transferring?

Securing the channel is essential. But inspecting the content is becoming essential, too.

The Blind Spot

Traditional MFT platforms ensure files get from Point A to Point B securely. They encrypt data in transit and at rest, enforce authentication, automate workflows, and generate the audit trails that compliance teams need.

What they typically don't do is look inside the file itself.

That means a perfectly encrypted, fully audited file transfer can still deliver malware into your environment, exfiltrate sensitive data like credit card numbers or patient health records to a trading partner, or carry hidden active content, embedded macros, or steganographic payloads.

The transfer was secure. But the content wasn't inspected. And that was the blind spot.

GoAnywhere MFT + Clearswift Secure ICAP Gateway Close the Gap

Fortra’s GoAnywhere MFT is one of the most widely deployed enterprise MFT platforms in the market. It handles the heavy lifting of secure file movement: encrypted transfers over SFTP, FTPS, HTTPS, and AS2, workflow automation, centralised administration, and compliance reporting across standards like HIPAA, PCI DSS, GDPR, and DORA.

What makes the architecture powerful is that GoAnywhere supports the ICAP (Internet Content Adaptation Protocol) standard, which allows it to hand off files to a content inspection engine before a transfer is completed.

This is where Fortra's Clearswift Secure ICAP Gateway comes into play.  When a file is uploaded to or sent from GoAnywhere MFT, the platform can route that file via ICAP to the Clearswift gateway for deep content inspection. The inspection happens inline - between origin and destination - so that threats and policy violations are caught before the file ever reaches the recipient.

Here's what happens during that inspection:

Threat Protection and Anti-Virus Scanning: Every file is scanned for viruses, malware, ransomware, and advanced persistent threats. If malicious content is detected, GoAnywhere can quarantine or delete the file and alert administrators immediately. This covers known threat signatures as well as behavioural indicators of zero-day threats.

Deep Content Inspection: The Clearswift engine doesn't just scan at the surface level. It inspects content hidden within documents, images, and archives - including embedded objects, macros, scripts, and executables that traditional AV might miss.

Structural Sanitisation: Rather than simply blocking suspicious files, the gateway can sanitise them. Active content such as macros, embedded OLE objects, and scripts can be stripped from documents, allowing the clean version of the file to continue through the transfer. The business process isn't interrupted, only the threat.

Adaptive Data Loss Prevention (A-DLP): Before files are sent to a trading partner or external recipient, the gateway inspects their contents for sensitive information: credit card numbers, personally identifiable information, protected health information, and other regulated data. Policy rules determine whether the transfer is blocked, the sensitive content is redacted, or the file is allowed through with an audit flag.

Document Sanitisation and Metadata Removal: Files often carry metadata that organisations don't intend to share - author names, revision history, comments, tracked changes. The Clearswift gateway can strip this metadata before the file leaves your environment, reducing the risk of inadvertent information disclosure.

Anti-Steganography: The gateway can detect and neutralise data hidden within image files that could be used for covert data exfiltration.

Why Content Inspection Matters

Layering content inspection into your transfer workflow adds a critical defence that operates independently of your MFT platform.

As regulatory expectations expand, organisations are increasingly expected to demonstrate not just that data was transferred securely, but that appropriate controls exist to prevent the movement of malicious or unauthorised content. An MFT platform paired with Data Loss Prevention and threat inspection provides the evidence trail regulators expect.

Further, files themselves are becoming the attack surface. Organisations have invested heavily in network perimeter security, endpoint protection, and email filtering. But files moving through MFT workflows may bypass these controls entirely. Inline content inspection ensures that every file - inbound and outbound - is subject to the same rigour.

A Single-Vendor Advantage

One practical benefit of the GoAnywhere and Clearswift pairing is that both products sit within the Fortra portfolio. This means unified vendor support, tested integration paths, and a licensing conversation with a single provider rather than stitching together tools from multiple vendors.

For organisations already running GoAnywhere MFT, adding the Clearswift Secure ICAP Gateway is a natural extension, rather than rip-and-replace. The ICAP integration is configuration-driven, and policies can be tuned to match your specific compliance and security requirements without disrupting existing transfer workflows.

Secure the Channel and Inspect the Cargo

Encrypting files in transit is now table stakes. Knowing what's inside those files and enforcing policy on that content before it reaches its destination is where mature enterprise file transfer operations are heading.

GoAnywhere MFT paired with the Clearswift Secure ICAP Gateway delivers exactly that: secure, automated, auditable file transfer with deep content inspection, threat protection, and adaptive data loss prevention built into the workflow.

If your current MFT setup moves files securely but can't tell you what's inside them, it's worth having a conversation with me about this.  At Generic Systems Australia we’re one of Fortra's most experienced providers of GoAnywhere MFT solutions and Clearswift Secure ICAP Gateway.