Search Results
209 results found with an empty search
- Ad-Hoc Filesharing Services Add Risk | GSA
< News Ad-Hoc Filesharing Services Add Risk 27 May 2025 Make no mistake - unintentional errors by employees and supply chain partners are a leading cause of data breaches. The uncontrolled use of ad-hoc file sharing services (e.g. WeTransfer, Dropbox, Google Workspace, Cerberus FTP Server, and ShareFile) significantly increases the risk of employees making mistakes and for those mistakes to go unnoticed. Here then are seven reasons why organisations should reconsider their use of ad-hoc cloud file sharing services. 1. They may not enforce automatic file encryption. A key means of preventing your data falling into the wrong hands is to ensure it’s always encrypted, both in transit, as well as when it’s being stored. A secure Managed File Transfer (MFT) solution can automatically encrypt your data. 2. Dubious key and certificate management. Beyond encryption of the file being transferred, some cloud applications leave files open to malicious intent by failing to maintain strong keys and certificates. 3. They may create compliance gaps. Not all cloud platforms meet regulatory requirements around file transfers, leaving your organisation liable for financial, legal, and reputational damages. 4. Limited data control. Unsupervised file sharing and collaboration can lead to files being sent to or accessed by unauthorised individuals. With many cloud-based solutions, once files are transferred, there’s no ongoing control over their use. A secure MFT provides ongoing safeguards with tight controls on who can access, edit, and transfer files, and for how long. 5. No workflow automation. MFT solutions such as GoAnywhere MFT simplify and automate file transfer processes, with multi-step workflows to execute repetitive, manual tasks. "Projects" can be easily created by dragging and dropping modules which define business processes to seamlessly transfer files, eliminating the need for complicated scripting or programming. For example: a Project can be created to retrieve encrypted data from a server, decrypt it, read file contents and submit them to a downstream internal application. The file can also be altered, added to, re-encrypted, and then sent to another external SFTP server. 6. Lack of centralised user management. Cloud file sharing solutions may not provide a comprehensive and easy to use dashboard for administrators to control access, authentication, and encryption of sensitive files. The more tools and applications that must be coordinated, the greater the risk of human or systems error. A robust MFT solution manages all types of file-send situations, including ad-hoc emails, large files, and batch files. 7. Threat detection and management. Protecting your organisation from viruses, malware, ransomware, Advanced Persistent Threats, and banned media types requires constant vigilance. Our Advanced Threat Protection can automatically block these threats and remove the element of human error from your risk profile. Local Expertise Available If you’d like to discuss removing the risk of ad-hoc file sharing applications from your organisation, please feel welcome to contact me . I’m always happy to have an obligation-free discussion, demonstrate the capabilities of the world’s most advanced MFT, and even offer you a zero-cost Proof of Concept. At Generic Systems Australia , we’re your local experts in secure Managed File Transfer. Previous Next
- Balancing Cyber Security with Frictionless Customer Experience | GSA
< News Balancing Cyber Security with Frictionless Customer Experience 17 June 2025 Cyber thieves are stealing more from businesses than “just” data and money. They’re stealing customer trust. Research shows that customers are increasingly worried about how well companies are protecting their data. And those worries are hurting companies’ bottom lines. Fears Realised Nearly 2 in 5 customers have been the victim of two or more data breaches, according to S&P Global Market Intelligence. A third of the victims of identity theft have experienced it within the past three years. Stuart Vaeth, SVP of strategic business development at Trua, said cyber theft incidents weaken customer trust and brand reputation. “The result can be lost business. It absolutely impacts the reputation of the service provider,” he said. “Obviously, it erodes trust. People may not come back to your site if your data has been breached.” Research by S&P Global Market Intelligence shows that more than three-quarters of customers are concerned about the risk of trying digital experiences or products that require sharing personal data online. This is a serious challenge for businesses who recognise that customer data is essential to providing personalised purchasing experiences. Cyber Security Integral to Customer Experience The safety of customer data is as much a customer experience issue as it is a cyber security one. Sheryl Kingstone, research director of customer experience and commerce at S&P Global Market Intelligence, said that a mistake many businesses make is to look at their customer data “in a silo”. “When we do take a look at things like what CISOs want or what privacy experts want versus what marketing and customer experience teams want, it becomes very complicated, because we need to mind the gaps,” Kingstone said. “There are trade-offs between compliance and the customer experience.” “Security compliance teams look at ensuring risk and compliance. CX leaders want to reduce customer friction points,” she said. Businesses need to balance customer experience with risk and compliance. Vaeth said that, while CX leaders generally aim for zero friction to prevent drop off, some friction can be beneficial. Collecting customer data directly or asking customers for verification can provide reassurance and need not impact drop off rates. Earning Customer Trust One way to earn customer trust and assure customers you take data protection seriously is to show them your credentials. For example, you can display them on your website and in marketing materials. Another way to demonstrate your “cybertrustworthiness” is to let your customers know when you’re investing in new technologies, improving processes and gaining certifications. It demonstrates you’re on a path of continual improvement that can differentiate you from your competitors. Protecting Customer Data Stepping up to the needs of customer data guardianship requires both technology solutions and sound business practices. Layered defences, with integrated solutions that address encryption, threat protection, and data loss prevention, enable safe collaboration without risking malware, mishandled data, breaches and non-compliance. Given most breaches involve a human element, technology solutions need to be automated and easy for employees to use. Software needs to be able to manage: How access to data is granted; How access is authenticated; How access is tracked and controlled; and How access can be speedily revoked, when needed. Layered Protection A standalone managed file transfer (MFT) solution – such as GoAnywhere MFT - is a great first layer of defence. It provides security for files at rest and in-transit. However, integrating Threat Protection as an additional layer enables you to take appropriate action when there’s customer data moving in and out of your organisation. Based on rules you predefine, Generic Systems Australia’s Advanced Threat Protection Bundle can mask, remove, or permit customer data to be moved within your organisation and beyond, via a Secure ICAP Gateway. On Hand to Help At Generic Systems Australia we’re the Asia-Pacific region’s experts in deploying Managed File Transfer and Advanced Threat Protection. We’ve assisted dozens of organisations to protect their customer data and secure their file transfers, while keeping their businesses running smoothly. If you’d like to discuss how we can help you, please feel welcome to contact me . I’m always happy to have an obligation-free chat and explain how simply we can help you maintain your customers’ trust. Attribution: This article includes quotes from an interview originally published on cybersecuritydive.com . Previous Next
- Shadow IT Threatens Your Data | GSA
< News Shadow IT Threatens Your Data 28 May 2026 Shadow IT is now one of the fastest‑growing threats inside enterprise environments, by creating unmonitored pathways for data to leave the organisation. Employees turn to unsanctioned tools - personal cloud drives, consumer messaging apps, ad‑hoc SFTP servers - because they’re convenient. However, these tools operate completely outside IT governance. Most of them employ no encryption standards, access controls, audit trails, or compliance oversight. That leaves blind spots for attackers can exploit. Managed File Transfer (MFT) solutions contain the risk of Shadow IT by replacing uncontrolled file‑sharing behaviour with a single, governed, auditable system. MFT enforces enterprise‑grade security - centralised authentication, encryption, policy‑driven access, and full transfer logging - so sensitive data never moves through unvetted channels. By consolidating all file movement into an approved platform, IT regains visibility, eliminates hidden third‑party exposure, and ensures every transfer complies with organisational and regulatory requirements. As Australia’s most experienced GoAnywhere provider, Generic Systems Australia is ready to help you take advantage of the capabilities of the world’s leading MFT solution, GoAnywhere MFT. In fact, we’re one of Fortra’s top ten MFT partners globally. Previous Next
- Boost Employee Productivity via Managed File Transfer | GSA
< News Boost Employee Productivity via Managed File Transfer 19 Feb 2025 76% of employees report that they spend 1-3 hours a day simply moving data from one place to another, according to research by Zapier. What if you could give your team that time back, to spend on more value-added tasks? You can - with Managed File Transfer (MFT). When Tools Become Time Sinks IT tools are designed to enhance employee collaboration and productivity. However, as businesses grow, they adopt many different IT tools, often with differing file formats. That opens up a black hole of time-wasting as employees are forced to translate and transfer files every time they want to share data across the organisation or with customers or suppliers. GoAnywhere MFT – the world’s leading MFT – automates this task. It gives employees back precious time to focus on more value-added tasks. GoAnywhere translates files to and from a variety of widely-used formats without cumbersome manual scripts. Its comprehensive ETL (Extract, Transform, and Load) features enable data values to be mapped, formatted and modified between source and target files automatically. Even better, GoAnywhere's secure collaboration features make connecting and sharing between employees easier, faster and more secure – even when they’re mobile. It provides an intuitive browser-based web client for performing ad-hoc file transfers, enterprise file sync and sharing via GoDrive, and a handy mobile application for moving files quickly while on-the-go. Protected Productivity In addition to the productivity and efficiency benefits it offers, GoAnywhere MFT protects your organisation’s valuable data at rest, and in transit. Coupled with an Advanced Threat Protection Bundle , it enables organisations to safely collaborate while repelling the efforts of cybercriminals. This automated defense system protects your data in three important ways: 1. Prevents files containing malware from being shared. 2. Blocks sensitive data from being shared. 3. Redacts sensitive information from files before transfer. Time to Tame the Time Sink? If you’d like to discuss how GoAnywhere MFT could help boost your organisation’s productivity and bottom line, please feel welcome to get in touch with us for an obligation-free discussion. Previous Next
- How MFT Helps Thwart AI Security Threats | GSA
< News How MFT Helps Thwart AI Security Threats 19 Feb 2026 Artificial intelligence has changed the cybersecurity landscape in two powerful ways: it has given defenders new tools for detection and automation, and it has given attackers faster, smarter, and more adaptive methods for exploitation. As organisations adopt AI across their operations, the risks tied to data exposure, model manipulation, and shadow‑AI usage are growing rapidly. That’s exactly why Managed File Transfer (MFT) has become a critical control point in modern AI security strategies. One of the biggest challenges today is that AI systems thrive on data - large volumes of it, moving constantly between teams, tools, and external partners. Every transfer is a potential attack surface. Traditional ad‑hoc methods like email attachments or unsecured cloud links simply can’t keep up with the sophistication of AI‑powered threats. Hardened, governed, auditable MFT platforms, however, provide a hardened, governed, and fully auditable channel for moving sensitive information, dramatically reducing the opportunities for AI‑driven attacks to take hold. Modern MFT solutions like the award-winning GoAnywhere MFT incorporate real‑time threat detection, anomaly spotting, and adaptive security controls. These capabilities are essential as attackers use AI to probe for weaknesses. AI‑enhanced MFT can identify suspicious patterns, stop threats as they emerge, and strengthen encryption and key management practices, giving organisations a proactive defence posture rather than a reactive one. However, the real blind spot isn’t always the transfer itself - it’s what happens after the data arrives. Many organisations have invested heavily in securing file movement, only to lose control the moment an employee uploads that same data into an unvetted AI tool. Closing the Gap As one analysis notes, the risk often comes from the gap between secure systems and everyday AI use, where sensitive information can slip outside established controls without malicious intent. MFT helps close this gap by centralising oversight, enforcing governance, and ensuring that data entering or leaving AI workflows remains visible, compliant, and protected. As AI governance frameworks mature, organisations are under increasing pressure to demonstrate transparency, accountability, and strong data‑handling practices. MFT supports these requirements by providing consistent audit trails, policy enforcement, and automated compliance reporting - key elements of responsible AI governance. In a world where AI accelerates both innovation and risk, MFT acts as a stabilising force. It ensures that sensitive data moves safely, predictably, and under strict governance - reducing the likelihood that AI‑driven threats can exploit gaps in the flow. For organisations embracing AI, MFT isn’t just a file‑transfer tool; it’s a foundational security layer for the era ahead. Help Right Here Generic Systems Australia is Fortra’s #1 GoAnywhere Partner in Australia and New Zealand, with decades of experience enabling organisations to become more efficient, organised and protected. Our Migration Service makes the transition even easier. If you’d like a no-cost, no-obligation discussion about how we could help you simply and affordably adopt an advanced MFT solution, please feel welcome to get in touch with us. Previous Next
- How GoAnywhere integrates with your Hybrid Cloud | GSA
< News How GoAnywhere integrates with your Hybrid Cloud 2 Oct 2025 Recent research by IMARC Group and Forrester shows Australian organisations increasingly using Hybrid Cloud as a strategic bridge between legacy systems and modern cloud-native applications. Hybrid Cloud enables them to modernise without abandoning critical infrastructure. By integrating on-premises environments with public cloud platforms, businesses can maintain control over sensitive or complex legacy workloads while gradually introducing scalable, agile cloud-native services. This duality enables seamless data flow, API-driven interoperability, and phased migration strategies—essential for industries bound by compliance or technical debt. GoAnywhere MFT — the world’s leading Managed File Transfer solution — facilitates businesses on this path by offering “ Cloud Connectors ” that seamlessly integrate GoAnywhere with external cloud services. Also referred to as “cloud integrations”, Cloud Connectors offer out-of-the-box connectors for GoAnywhere to popular services including Salesforce, SharePoint Online, Microsoft Dynamics 365, Box, and Dropbox. For example: One a trading partner might ask you to share an important file it via a folder in Dropbox. Or perhaps there are contacts or billing information to be updated automatically in Salesforce. GoAnywhere’s Cloud Connectors enables these tasks to be done easily and securely. Broad Range Cloud Connectors are easily downloaded from GoAnywhere MFT’s integrated Marketplace, which features Connectors for the most commonly used cloud services. These include: • Alibaba Object Storage Service • Amazon Cloud Trail, CloudWatch, EC2, Lambda, SNS, and SQS • Atlassian JIRA • Automate Plus • Azure Data Lake Storage Gen1 (superseded by Gen2) and Storage Queue • Box • Citrix ShareFile • Dropbox • Egnyte • GateScanner CDR • GoAnywhere Command • Google Cloud Storage, Drive, and Translate • JAMS • Jenkins • Microsoft Dynamics 365 Business Central, 365 CRM, OneDrive, Sharepoint Online and Sharepoint On-Premise • OPSWAT MetaDefender • Salesforce • ServiceNow • SMA OpCon Scheduler • SOS Berlin JobScheduler (Online version not supported) • Trello • Veeva CRM • Votiro • Webdocs • Zendesk (Online version not supported) Configuring Cloud Connectors Once a Cloud Connector is installed, its connection properties can be configured as a GoAnywhere Resource. This only needs to be performed once, and can then be seamlessly reused in any workflows and cloud file transfers. A Cloud Connector definition contains the various actions required to communicate with cloud applications. For example: authentication logging file transfer file management and error handling. In GoAnywhere, these actions appear as elements located under the Cloud Connector in the GoAnywhere Project Designer. Elements can be incorporated into a business’s workflows alongside other project tasks, and processes can even be automated between multiple web and cloud services at once. New GoAnywhere connectors can be downloaded without needing to update the software. No Connector? No problem While GoAnywhere Marketplace contains a broad array of Cloud Connectors, you may also want to connect to a unique external service. Custom connectors are the answer. And at Generic Systems Australia, we can design and develop Custom Connectors for you, using GoAnywhere’s Cloud Connector Designer. If you’d like to discuss how your organisation’s file transfers to external cloud providers can be made more efficient and secure, please feel welcome to get in touch with me. I’m always happy to have an obligation-free discussion, explain how easy it is to transition to an improved file transfer approach, and offer you a zero-cost Proof of Concept. At Generic Systems Australia , we’re your local experts in Managed File Transfer. Previous Next
- NEW CYBER LAWS PASSED | GSA
New Cyber Laws Passed – What Australian Businesses Need to Know and Do Earlier this week, the Australian Parliament passed a suite of legislative reforms designed to enhance Australia’s cyber security. The reforms include a raft of new requirements and obligations on Australian businesses. About the Legislation Based on recommendations by the Parliamentary Joint Committee on Intelligence and Security, the new legislation addresses a number of proposals initially set out in Australia’s 2023 – 2030 Cyber Security Strategy, and spans three separate Acts: the Cyber Security Act 2024 (Cyber Security Act); the Intelligence Services and Other Legislation Amendment (Cyber Security) Act 2024; and the Security of Critical Infrastructure and Other Legislation Amendment (Enhanced Response and Prevention) Act 2024 (SOCI Amendment Act). Mandatory reporting of ransom payments, and the introduction of a new voluntary information sharing regime, will have the most immediate impact on organisations. Mandatory reporting of ransomware payments Ransomware attacks are rife across Australia. The Australian Signals Directorate (ASD) reported that this form of cyber extortion accounted for 11% of all cyber incidents to it in 2023-2024, up from 8% in the previous year. The Government had previously pursued a ban on ransom payments. However, its position has since moderated somewhat. The Cyber Security Act only requires organisations to report ransomware payments to the Department of Home Affairs and the ASD. This new reporting obligation will commence at latest six months after the Act receives royal assent (potentially earlier by proclamation) and applies broadly to: organisations which are a responsible entity for a critical infrastructure asset; and other private sector organisations which conduct business in Australia with an annual turnover exceeding a threshold (to be specified - likely to be A$3M). Ransomware reports are required to be made within 72 hours of making a payment (not the receipt of a demand or the discovery of a ransomware attack). Difficult Decisions The requirement to report payments will need to be taken into account by Boards when considering whether to pay a ransom. The Government’s general view on ransoms continues to be that organisations should not pay them. It reasons that payments don’t guarantee the recovery or confidentiality of stolen data, but do encourage cyber attacks to proliferate. Organisations in receipt of ransom demands are left to ponder several competing considerations… Paying a ransom could potentially contravene sanctions (such as the one imposed on Aleksandr Ermakov, the individual responsible for the 2022 Medibank data breach) or anti-money laundering laws. Company Directors fulfilling the duty of care to act in the best interests of their organisation will need to balance the risks of payment - commercial damage, incentive to re-target, uncertainty of data recovery – against the risks of not paying - loss of systems data, reputational damage, third party claims, lost customers and business disruption. If a ransom payment is made, then the new mandatory reporting obligation will be in addition to other applicable reporting requirements an organisation is subject to. These could include the Privacy Act 1988, the SOCI Act, and continuous disclosure obligations under the ASX Listing Rules and CPS 234. In fact, it’s important that Cyber Incident Response plans developed by organisations specifically address these overlapping requirements, taking into account the various regulators and timeframes of each. Be aware that, for any entities regulated under the SOCI Act, it’s also conceivable that the Government could use its directions power to direct an entity to pay - or not pay - a ransom. An organisation which fails to comply with mandatory ransom reporting will incur a civil penalty of 60 penalty units (currently A$93,900). Voluntary reporting regime A new National Cyber Security Coordinator (NCSC) is being established under the Cyber Security Act to lead a whole-of-government response to significant cyber security incidents. The Act provides a framework for the voluntary disclosure of information by any organisation operating in Australia, or any responsible entity under the SOCI Act, to the NCSC relating to cyber security incidents. However, it imposes various limitations on how the NCSC may further use and disclose information voluntarily provided by entities, depending on the significance of the incident. Non-significant cyber security incidents: Information can be used for limited purposes such as directing the reporting entity to assistance services, coordinating a government response, and informing Ministers. Significant cyber security incidents: Information can be used for broader ‘Permitted Cyber Security Purposes’. These include preventing or mitigating risks to critical infrastructure or national security, and supporting intelligence or enforcement agencies. A cyber security incident is deemed “significant” if: there is a material risk that the incident has seriously prejudiced, is seriously prejudicing or could reasonably be expected to prejudice the social or economic stability of Australia or its people, the defence of Australia or national security; or the incident is, or could reasonably be expected to be, of serious concern to the Australian people. Information voluntarily provided by organisations to the NCSC is subject to limited use protections similar to those which apply to information disclosed as part of a ransomware payment report. The new voluntary reporting regime and corresponding limited use protection has come into immediate effect. Limited use protection The Cyber Security Act outlines how businesses should work with the NCSC and other government agencies to obtain assistance and guidance when responding to cyber incidents. It also provides businesses with certain limited use protections when collaborating with the government’s cyber security agencies - a legislative foundation for the CISA Traffic Light Protocol government agencies have recently offered when assisting organisations. Such protections were requested by business lobby groups. They provided feedback during the public consultation period that disclosing information about a data breach could risk exposing an organisation to further regulatory or enforcement action, adverse publicity and litigation. Further, if disclosing a cyber incident was determined to be against an organisation’s best interests, its directors could potentially be in breach of their duties in approving the disclosure. That could in turn expose directors to enforcement action from ASIC. Counterweighing these concerns, the Government believes that sharing information on current threats and incidents can help other organisations avoid similar incidents. In balancing these competing interests, the Cyber Security Act limits the purposes for which information contained in a ransomware payment report or voluntarily report provided to the NCSC can be used or disclosed. The NCSC (and any Government agency it coordinates with) cannot record, use or disclose the information provided for the purposes of investigating or enforcing or assisting in the investigation or enforcement of any contravention of a Commonwealth, State or Territory law. An important exemption from the limited use protections are that crimes and breaches of the limited use protections created by the Act. In this way, the protections stop short of being a full “safe harbour”. Information provided under these protections isn’t admissible in evidence against the disclosing entity, including criminal, civil penalty and civil proceedings (including a breach of the common law). And, the provision of information to the NSCS does not affect any claim of legal professional privilege over the information contained in that information. These limited use protections will be of value to organisations disclosing information to the Government about cyber incidents. However, directors should bear in mind the notable gaps in the protection they provide. For example: Information provided can’t be used or disclosed for the purposes of investigating or enforcing any contravention by the reporting entity of another law (whether federal, state or territory), other than a law that imposes a penalty or sanction for a criminal offence. This means that if the ransomware report indicates that a payment was made in breach of relevant sanctions laws, then the limited use protection will not prevent the use of the report in a subsequent investigation or enforcement action. While information provided to the NCSC cannot be obtained from the NSCS by regulators or government agencies, the protection offered under this Act does not prevent regulators from obtaining the underlying information through other means, including via regulatory investigatory powers or where provided under other mandatory reporting regimes, such as those in the Privacy Act 1988, the SOCI Act, the Telecommunications Act 1997 and the ASX Listing Rules continuous disclosure obligations. So, cyber incident notifications provided to the ACSC under the SOCI Act are not captured by the limited use protection, even if that information is also voluntarily provided to the NCSC or detailed in a mandatory ransomware report. A similar limited use protection has been introduced via the Intelligence Services and Other Legislation Amendment (Cyber Security) Act 2024 for cyber incident information voluntarily shared with the ASD. Other Inclusions in the Legislation This article has focused on developments within the new Cyber Security legislative reforms which will most impact companies and organisations. However, in the interests of completeness, here is a brief overview of other key developments covered in the legislation: Mandated Security Standards for Internet of Things (IOT) Devices. These standards will be detailed in legislative rules, with suppliers required to provide a statement of compliance for devices supplied to the Australian market. New Cyber Incident Review Board. This independent advisory body will be empowered to conduct no-fault, post-incident reviews of significant cyber security incidents and provide recommendations and information to both the private and public sector. It will have the power to compel entities to provide information about significant cyber security incidents. Critical Infrastructure definition expanded. Data storage systems which hold business critical data have been added to the definition of critical infrastructure assets. This closes a gap in the regulations which became apparent in the aftermath of the Optus and Medibank data breaches. Expanded Incident Response Powers. The Government will now have the power to direct an entity to take, or not take a specific action, in the event of a cyber incident affecting critical infrastructure. Security and incident notification obligations moved from the Telecommunications Act 1997 to the SOCI Act, consolidating the cyber obligations of telecommunication carriers and carriage service providers under a single piece of legislation. What Organisations Should Do Cyber security response plans should now be reassessed and upgraded to ensure they align to the new mandatory ransomware reporting requirements. Playbooks and procedures should take account of how an organisation plans to engage with cyber security authorities, bearing in mind the extent - and limitations - of the defined limited use protections. Focus on preventing cyber incidents - not just responding to them. A Managed File Transfer (MFT) solution such as GoAnywhere MFT can encrypt data at rest and in transit, complying with the highest data security standards. It manages inbound and outbound file transfers across an organisation, using industry-standard file transfer protocols and encryption to protect your data. Advanced Threat Protection and Adaptive Loss Prevention add a further layer of defence. SFT Threat Protection facilitates safe collaboration with external parties, helping to prevent malware from entering an organisation, and reducing the risk of employees losing or mishandling sensitive data. Finally, organisations should seek professional legal counsel in determining and responding to their obligations and responsibilities under the new Cyber Security legislative reforms. The information provided in this article has been general in nature, and the interpretations and advice outlined above should not be interpreted as professional legal advice.
- GoAnywhere Modules | GSA
GoAnywhere Modules Available to License Fortra's GoAnywhere is a robust and complete managed file transfer solution. Augmenting its capabilities are Modules that can satisfy an even broader array of file transfer requirements. You can choose to license and pay for only the modules you currently need, and easily unlock additional modules, if necessary. ADVANCED WORKFLOWS The Advanced Workflows Module is used when you are initiating the transfer (push/pull), if PGP encryption/decryption is needed, if data needs to be pulled from or uploaded to a database, and if additional actions in a workflow need to be called before/after a file exchange. GoAnywhere MFT includes more than 60 built-in tasks for performing a wide variety of business processes. This includes tasks to retrieve and distribute files, transform data, encrypt/decrypt files, compress/decompress files and interact with databases. Other tasks can be used to call native commands, execute programs, send emails, search and replace file contents and more. You can also build your own custom tasks to use within Projects. This is especially helpful if you need to perform special processing or connect to ERP systems and other applications using proprietary interfaces. Multiple tasks can be "chained" together within a Project to perform a series of steps. For example, a Project could be defined with a task to retrieve an XML file from a trading partner, then another task to parse the XML and finally a task to import the data into a database table. Built-in Tasks include: -Compression (inc Zip, UnZip, GZip, GUnzip, Tar, Untar) -Database (SQL statements supported by the database server) -Data Translation (inc CSV, Excel, Fixed-Width, Flat File, XML, JSON, RowSet) -Email & SMS -File System -File Transfer -Integration (IBM I, Native Commands, SSH commands, ICAP, SNMP Trap) -Job Control (Calls to Modules and Projects, If/Else Conditionals, Timing, Error logging etc) -Loops (Do-While, For-Each, Iterate, While etc) -Miscellaneous (Base64, Deny Trigger Event, Print, Secure Form Response, Set Variable, Timestamp) -Message Queue (Send, Retrieve, Commit, Rollback etc) -PGP (Encryption, Decryption, Sign, Verify) -Project (Comment, Import, Modules, Variables) -Reports (>20 customisable Reports) -Web Services (JWT, SOAP, REST) SFTP SERVER The SFTP Server Module handles the server side of an SFTP transfer. Your partner connects to you via SFTP and initiates the transfer. An SFTP server provides a way for organisations to securely exchange sensitive files over a network. SFTP helps ensure data integrity and security by using encryption and authentication during the file transfer process. GoAnywhere MFT, an enterprise-level file transfer solution, allows your trading partners to securely exchange files with your organisation using SFTP (SSH File Transfer Protocol) and SCP (Secure Copy) protocols. The solution also supports the latest SSH 2.0 protocol standard and allows for both password and SSH key authentication. An encrypted tunnel is created between the SFTP server in GoAnywhere MFT and any trading partners, which protects all data, user ids, passwords and commands that flow over the connection. Secure FTP is critical for compliance with PCI DSS, HIPAA, HITECH, SOX and state privacy laws. Through GoAnywhere’s SFTP client, organisations can exchange files between their local system and a remote server, with data encrypted via the SSH protocol. SFTP Server Features: -Highly scalable with no restrictions on the number of trading partners. -Support for multiple listeners with configurable port numbers -Remote administration and monitoring through a browser-based interface -Robust security and granular permission controls -Multiple authentication methods; database, Active Directory (AD), LDAP and IBM i -Administrators can view active sessions for logged-in users -Event triggers to automatically process files or send email notifications -Support for client requests to resume file transfers -Configurable settings for maximum number of sessions, maximum login failures and idle timeouts -ZLIB compression to reduce bandwidth requirements -Ability to accept or reject files with certain extensions -Allows only strong NIST-certified encryption algorithms when in FIPS 140-2 Compliance mode -Can be installed in the private network without opening inbound ports, when paired with GoAnywhere Gateway in the DMZ SFTP Logging Audit trails (logs) are generated for all SFTP and SCP sessions in GoAnywhere MFT to meet auditing and compliance requirements. This detail includes: -commands issued -messages -IP addresses -user ids -file names transferred. Log messages can additionally be sent to a SYSLOG server using UDP or TCP connections. SSH Key Management Intuitive graphical screens are provided in GoAnywhere MFT to allow for the management of SSH Keys. This Key Manager can be used to create SSH public and private keys, import and export keys, and view keys. Both RSA and DSA key types are supported with key lengths up to 4096 bits. High Availability Planning with SFTP When it comes to file transfers, it’s critical that organisations are able to complete them without disruption. Businesses can choose from either active-passive and active-active high availability plans. -Active-passive plan failure downtime for trading partners can run from a few seconds to a few hours depending on how organisations start the passive system. -Active-active plan failure downtime is most commonly zero because there is always a backup system that can take over in a moment of system failure. These high availability plans can help organisations minimise and avoid downtime, meet SLAs, and increase user satisfaction. Standards Support for SFTP Server: -Protocol: SSH 2.0 -Ciphers: AES-128, AES-192, AES-256, Triple DES (DESede), Blowfish -MAC Algorithms: HMAC-SHA1, HMAC-SHA2-256, HMAC-MD5 -Key Exchange Algorithms: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256 -Compression: ZLIB FTPS SERVER The FTPS Server Module handles the server side of a FTPS transfer. Your partner connects to you via FTPS and initiates the transfer. GoAnywhere MFT acts as FTPS software that allows your trading partners to securely exchange files with your organisation using FTPS (FTP over SSL/TLS) protocol. GoAnywhere MFT supports both implicit SSL and explicit SSL connection types. Dual factor authentication can be performed using user ids, passwords and certificates. An encrypted tunnel will be created between the FTPS server in GoAnywhere MFT and any trading partners, which will protect all data, user ids, passwords and commands that flow over the connection. Secure FTP is critical for compliance with many data privacy laws. FTPS Server Software Features: -No restrictions on the number of trading partners -Support for multiple listeners with configurable port numbers -Remote administration and monitoring through a browser-based interface -Robust security and granular permission controls -Multiple authentication methods; database, Active Directory (AD), LDAP, and IBM i -Administrators can view active sessions for logged-in users -Event triggers to automatically process files or send email notifications -Support for client requests to resume file transfers -Anonymous logins can be enabled or disabled -Custom welcome and logout messages -Authentication can be performed using self-signed and 3rd-party signed certificates -Configurable settings for maximum number of sessions, maximum login failures, and idle timeouts -Ability to accept or reject files with certain extensions -Allows only strong NIST-certified encryption algorithms when in FIPS 140-2 Copliance mode -Can be installed in the private network without opening inbound ports, when paired with GoAnywhere Gateway in the DMZ FTPS Logs Audit trails (logs) are generated for all FTPS sessions in GoAnywhere MFT to meet auditing and compliance requirements. This detail includes commands issued, messages, IP addresses, user ids and file names transferred. Log messages can additionally be sent to a SYSLOG server using UDP or TCP connections. X.509 Certificate Management The GoAnywhere MFT Certificate Manager allows authorised administrators to work with X.509 certificates. This Certificate Manager can be used to create certificates, generate CSRs, import CA replies, import trusted certificates, export and view certificates. RSA and DSA key types are supported with key lengths up to 4096 bits. Certificates can be configured to expire at specified dates. FTPS Server Standards Support: -SSL/TLS Versions: SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2, -Connection Types: Implicit SSL -Implicit SSL Security Protocols: SSL, TLS -Ciphers: AES-128, AES-192, AES-256, DES, RC4, Triple DES (DESede) -Authentication and Key Exchange Algorithms: Diffie-Hellman, DSA, RSA -Hash Algorithms: MD5, SHA1, SHA2 -Certificate Key Store Formats: JKS (Java Key Store), PKCS12 SECURE FOLDERS The Secure Folder Module allows web users to connect to your HTTPS server via a browser. GoAnywhere MFT can be utilised for exchanging files with HTTP servers (Web Sites). Connections can be made to both standard HTTP servers and secure HTTPS servers using SSL/TLS. HTTP(S) servers can be pre-defined in GoAnywhere MFT's Administrator as reusable Resources which can then be selected from simple drop down menus. HTTP Tasks can be placed within GoAnywhere MFT Projects and executed as part of a cohesive workflow process. For example, a Project could be defined to get a CSV file from a HTTPS server, read the data from the CSV file, and import the data into a database file. HTTP(S) Features in GoAnywhere MFT: -Cookies support -HTTP Redirects support -Perform requests with parameters -Download/upload multiple files per session -Filter files to download based on last modified date/time -Utilises only strong NIST-certified encryption algorithms when in FIPS 140-2 Compliance mode -Pass in variables (at runtime) to override HTTP(S) attributes AS2, AS3, & AS4 SEND/RECEIVE The AS2, AS3, & AS4 Send/Receive Module enables secure protocols that send and receive messages. AS2 supports the encryption of messages between trading partners and vendors via HTTPS. AS4 is an open B2B standard for exchanging secure documents between businesses using web services. Each protocol provides an extra layer of security through the use of digital signatures. AS2, AS3, and AS4 are licensed by number of partners. GoAnywhere is Drummond Certified, which is required by many businesses that exchange via AS2 and AS4. SECURITY DOMAINS The Security Domains Module makes it possible to virtually segment a GoAnywhere installation into multiple security zones. Every license includes two domains. More domains are useful if you want to manage file transfers and associated users in their own domain (by department for example). Admin Users can be authorised to specific Domains, in which those users can only work with the items belonging to those Domains. Examples of items that can be assigned to Domains are Resources, Projects, Schedules, Monitors, Triggers, Admin Users and Web Users. Each Domain can be configured with file access restrictions to prevent users from accessing restricted network locations. SECURE MAIL The Secure Mail Module allows your employees to send messages and files as secure "packages" on an ad-hoc basis. Recipients will get an email with a unique link to each package, allowing them to download the message and files through a secure HTTPS connection. This is a great alternative to regular email since there are no file size or file type restrictions. Secure Mail Features: -Secure Mail can be sent from within the user's browser or from Microsoft Outlook -Multiple files can be attached to a single package -No file size limitations or file type restrictions -Includes options to set expiration dates and maximum downloads -URL link for each package is randomly generated using a universally unique identifier (UUID) -Packages can additionally be secured using a system-generated or user-specified password -Recipients do not have to deal with keys or certificates -Files are transferred over a secure HTTPS connection -Sender can choose to receive notifications when packages are read -Sender can "recall" packages to make unavailable to recipients -Customisable templates allow rebranding messages with your own logo, colours, fonts, etc. -View audit trails of all package activity (e.g. when sent, when opened, when downloaded, etc.) GoAnywhere MFT is installed within your network, so your organisation will keep localised control over the Secure Mail settings, packages and audit trails. Files will remain on your system until they are downloaded by the recipients; the files are not hosted by a 3rd party. Your employees can authenticate against an existing Active Directory (AD), LDAP or IBM i system within your network. Five free Secure Mail users are included with every GoAnywhere license. Composing Emails Messages can be composed through the GoAnywhere MFT browser-based interface or by using the GoAnywhere Outlook Plugin. With the Outlook Plugin, the user would compose the message in Microsoft Outlook as normal. When ready to send, the user would click on the new "Send Secure Mail" button to pass the message through the GoAnywhere MFT Secure Mail module. Rules can be set to automatically use Secure Mail whenever the user sends large file attachments using the regular Outlook "Send" button. The Outlook plugin supports Kerberos Single Sign-on for easier adoption by your users. Email Notifications Each recipient of a Secure Mail package will receive a notification via email. The notification will show the message subject, a summary of the attachments and a link for downloading the files in the package. Secure Email Downloads When a recipient clicks on the link in the notification email, it will open the download page over secure HTTPS protocol. The user can then just click on the files to download or open. Secure Email Administration Secure Mail settings, packages and audit logs are managed within the GoAnywhere MFT browser-based administrator. To minimise disk space usage, GoAnywhere MFT can automatically purge packages when they expire or when they meet their maximum download count. ADVANCED REPORTING The Advanced Reporting Module gives you access to important system information as PDF documents. Easily generate reports of file transfer activity, user statistics, and completed jobs from within the console. Filter reports by date, user ID, and other criteria to gain insight into the information that matters to you, as either detailed or high-level summary reports, both available with informative charts and graphs. Alongside the built-in reports, custom reports can be created using data provided from a database, CSV, Excel, fixed-width, XML, or JSON files. Reports can either be run as needed, directly through the browser-based console, or scheduled and either distributed to the network or sent via email. Custom Reporting: -a custom report based on data from a database, CSV, Excel, fixed-width, XML, or JSON file to give you ultimate flexibility on reporting. General File Transfer & System Reports: -Blacklisted IP Addresses - displays blocked IP addresses and their creation timestamp -Database Statistics - displays the number of rows for each database table in GoAnywhere MFT -File Transfer Summary displays the total number of files transferred during the specified date range -Global Activity Details displays all activity for the selected features based on the search term provided -Product Usage Report displays product usage information related to service and workflow statistics. -Service Activity Summary displays the number of uploads and downloads for selected protocols. -Trigger Activity displays executed Triggers, status and associated event types. Jobs-Based Reports: -Completed Jobs Detail displays completed jobs, status and the user who ran the job -Completed Jobs by Project displays completed job details based on their projects and the specified date range -Completed Jobs Statistics displays the total number of jobs processed during a specified date range -Job Count Summary displays a pie chart of the number of jobs processed within a specified date range -Unresolved Jobs displays Jobs that failed during a specified date range that have not yet been resolved User Reports: -Admin User Activity -Details displays all admin activity for the selected components -Web User Logins displays a list of user logins for the time period specified -Web User Transfer Count Activity displays the number of file transfers performed by user -Web User Transfer Size Activity displays the total size of transferred files by each user Expiry & Error Reports: Expiring Open PGP Keys displays any Open PGP keys that will expire within a specified date range Expiring SSL Certificates displays SSL Certificates that will expire within a specified date range Service Errors displays all errors for the selected inbound services within the specified date range Unresolved Jobs displays Jobs that failed during a specified date range that have not yet been resolved Module-Specific Reports: -GoDrive Disk Usage displays the total amount of disk usage for each GoDrive user -Secure Mail Activity displays Secure Mail audit activity -Secure Mail Disk Usage displays the Secure Mail disk usage for each Web User sorted by size -Secure Mail Package Sizes displays a list of Secure Mail Packages and their sizes -Service Activity by Module displays all activity for inbound services within the specified date range Security Settings Audit Report: GoAnywhere MFT can analyse more than 60 different security settings to determine compliance with applicable sections of the Payment Card Industry Data Security Standards (PCI DSS). If a security setting does not meet the standard, the report will indicate the corresponding PCI DSS section and the recommendation on how to correct the security setting. GoDrive The GoDrive Module provides Enterprise File Sync and Sharing (EFSS) services for your employees and partners. With GoDrive, files and folders can be easily shared between users with advanced collaboration features including file revision tracking, commenting, trash bin, media viewing and synchronisation with Windows, Apple and Android devices. GoDrive is your best alternative to cloud-based file sharing services. It provides on-site file storage with localised control, end-to-end encryption, and detailed audit trails. Security GoDrive provides end-to-end encryption for sensitive files. Since no files are stored in the cloud, your organisation maintains local control to meet compliance requirements. In addition to the full complement of security features in GoAnywhere MFT, GoDrive includes: -Set granular permissions at the folder, subfolder and individual file level -Dual-factor PIN authorisation for device registration -AES 256-bit encryption on files synced to GoDrive devices Administration Included with GoAnywhere MFT, GoDrive provides a browser-based interface for administrators to easily manage users, security settings and shared folders. -Set disk quotas and view disk usage -Deactivate and wipe GoDrive folders from stolen or lost end-user devices Collaboration Sharing files with others is a snap using GoDrive. We even give you 5 free Users to get started, along with 5 free Secure Mail Users for any paid GoAnywhere license. Employees can quickly invite authorised users to work with their shared folders and files using the provided browser interface. Sharing: -Easily drag-n-drop files between the desktop and GoDrive folders -Generate automatic email invitations to shared users -Create public links to share files outside your organisation -Enter file comments, as well as review comment history from other users -Organise files into user-defined folders and subfolders -View thumbnail images of graphics files -Search for files and folders Monitor: -User can monitor shared files via activity streams -Receive email notices when shared files are downloaded or modified by others -View and recover prior versions of files Manage: -Lock files for restricting access -Revoke sharing of folders and files when needed -Place files into a recycle bin for future recovery -Manage shared folder access with granular permissions -View history of when files are downloaded, uploaded and modified GoAnywhere Desktop Client The GoAnywhere Desktop Client for Windows and Mac will synchronise your files from the GoDrive folder on your workstation with the GoAnywhere MFT server. Files automatically appear on each of your registered devices, as well as the Web Client, allowing you to access your files from any internet connected computer. The GoAnywhere Desktop Client for Windows supports Kerberos Single Sign-on for easier adoption by your users. GoDrive Mobile App The GoDrive mobile app allows you to access files on your iPhone, iPad, and Android phones and tablets for your authorised account. These files can be previewed or optionally downloaded for offline access. Your files and folders will be automatically updated to the most current version each time you connect to the server. Logging and Reporting Capturing detailed audit log information and exporting for reporting purposes is a cornerstone of GoAnywhere MFT. GoDrive logs each time a file is uploaded, downloaded, edited, shared, commented on, and deleted. Scalability and High Availability Clustering provides scalability that allows GoDrive to support thousands of users while active-active maximises availability for mission critical file sharing. SECURE FORMS The Secure Forms Module (which requires Advanced Workflows) allows your end-users to fill out and submit information online through secure custom-made forms with one or more input values, optionally upload files through GoAnywhere's HTTPS Web Client, or submit forms online by making SOAP or REST requests from your custom built applications. When a form is submitted, a Project in GoAnywhere is executed to automatically process the submitted values and files. Use Secure Forms to control the data that end-users provide when submitting information. GoAnywhere administrators can define Secure Forms with: -Configurable input fields -Custom labels -File upload components When the Project processes the Secure Form, it can return a custom message and one or more output files to the user. A Secure Form can be specified to various intended languages. For example, two forms may be created that serve the same purpose, but one may be in French while the other is in English. GoAnywhere administrators can choose their preferred language in the Web Client, which will then only show forms that are applicable to the selected language. Secure Form Submission A Secure Form can be authorised to one or more Web Users, who must then log in through the Web Client to complete the form. Optionally, Secure Forms can be configured to allow anonymous users to access the form through a public URL. Secure Form Use Cases Secure Forms are used by organisations in all industries to streamline, centralise, and standardise information intake. Companies have used Secure Forms to reduce the number of ways in which files arrive (i.e., by fax, email, or other online submission), collect confidential information, and ensure data is delivered securely. In one example, Secure Forms are used to collect electronic voting ballots by prompting the user to enter their voting information and attach a scanned PDF. A Project workflow then automatically process and distribute this electronic ballot to the appropriate election official based on the voting information provided by the end-user within the Secure Form. Secure Forms Features: -Custom, fillable Secure Forms for either public or authenticated users -Flexible configuration and design options to control the position of form features such as buttons -Customise and control the input text, options, and dropdown fields with default values, tooltips, and placeholders -Projects that automate processing the Secure Form input data and, optionally, provide output messages and one or more files for users to download -Fully customisable Text Area components, including the ability to override the button labels, the characters remaining text, and the drop zone on File Upload components -Successful submission messages presented to users when Secure Forms are submitted -Drag and drop upload for files which are automatically secured with AES-256 bit encryption -Limit file upload parameters, including the file types that are permitted to upload, file size, and maximum number of files -Save drafts of Secure Forms to finish at a later date -View Secure Form submission history, including when the form was completed, the user who completed the form, the user’s responses, and more -Supports SOAP and RESTful Web Service APIs to allow you to submit forms from other applications AGENTS The Agents Module (which requires Advanced Workflows) enables lightweight applications that automate your file transfers and workflows on systems (both remote and on-premises) throughout your enterprise. The agents are managed by a central deployment of GoAnywhere Managed File Transfer (MFT), which allows you to configure and schedule agent file transfers and business processes from an intuitive, browser-based interface. Agent Features: -Control agents remotely from the central server. -Process files on the agent or send them to GoAnywhere for further processing. -Deploy remote agents wherever they're needed: on a server, to a trading partner location, or in the cloud. -Automatically upgrade agents to the latest version without causing downtime. -Customise your software library of agent installers to fit the needs of your environment. How Agents Work When your file transfers execute, all log data is streamed from the agents (wherever they’re deployed) to GoAnywhere for consolidated auditing and reporting. This unique approach provides visibility into all the file transfers running within the organisation. MFT agents can be installed onto almost any server or workstation where file transfers or workflows need to be performed. This includes Windows, Linux, UNIX, IBM I, and Mac OS systems. For organisations who prefer to perform their file transfers in the cloud, GoAnywhere MFT supports the use of agents remotely in cloud infrastructure such as Amazon EC2 or Microsoft Azure. Agent Functionality Here are examples of what agents can do to assist your IT initiatives: -Automate and secure file transfers within a centrally managed environment -Monitor folders on agent systems for new or modified files -Schedule agent file transfers to run at future dates/times -Provide additional workflow capabilities such as compression, decompression, data parsing, database integration, PGP encryption and decryption, SFTP and SCP file transfers, and native command execution -Send email or text message alerts when agent file transfers fail -Feed audit data to GoAnywhere MFT for central reporting -Monitor location and status via an interactive agent map -Deploy automatic notifications if an agent goes offline Remote Agent Deployment After installing GoAnywhere MFT on your internal network, you can install Agents on specific servers or workstations within your network, at remote locations, and within cloud infrastructure that will automatically monitor folders, carry out file transfers, and synchronise concurrent workflows at various locations. 1- Agents in the Internal Network. Agents can be installed on servers or workstations in your network for transferring files from and to GoAnywhere and other systems for processing. The agents can perform additional workflows on the system where the agent is deployed such as copying files, running commands, or parsing data. 2- Agents at Remote Locations & "Retail Polling". Agents can be installed at remote locations to automatically monitor folders and transfer files on an automated basis. This "retail polling" feature is ideal for synchronising files between a corporate data centre and remote locations such as stores or branch offices. 3-Agents on Trading Partner Systems. Agents can be installed on servers owned by your trading partners. When a trading partner places a file in a folder which is monitored by the agent, GoAnywhere can automatically pull the file to your organisation's network. In turn, GoAnywhere can use those agent connections to push files to your trading partners. 4-Agents on Cloud Infrastructure. MFT agents can be installed on server instances within cloud infrastructure like Amazon AWS and Microsoft Azure. These agents could be used to move files securely between the cloud and your internal network. GoAnywhere Gateway The GoAnywhere Gateway Module is a separate product and must be downloaded on its own. It is normally used if you licensed the server side of the transfer (SFTP, FTPS, Secure Folders, FTP) but it can also be used for outbound connections too. GoAnywhere MFT Gateway is an enhanced reverse proxy that resides out in the DMZ, routing server requests without having any ports open into the network. It can also load balance/cluster the file servers. -GoAnywhere’s MFT Gateway provides an additional layer of security when exchanging data with your trading partners. It allows you to keep file sharing services (e.g. FTP/S, SFTP, HTTP/S servers) and documents safely in your private/internal network. With GoAnywhere’s Secure File Gateway, no inbound ports need to be opened into your private network, which is essential for compliance with PCI DSS, HIPAA, HITECH, SOX, GLBA and state privacy laws. -MFT Gateway Features -GoAnywhere’s secure file gateway provides the extra layer of protection for your file sharing services by… -Not allowing incoming ports to be opened into the private network, which reduces the risk of intrusion -Not storing sensitive data files in the DMZ -Keeping user credentials, certificates, and keys safely in the private network -Supporting FTP/S, SFTP, SCP, HTTP/S and AS2 file transfer protocols -Hiding the locations and identities of internal systems -Not requiring any special hardware components; it is a software-only solution. Why use GoAnywhere MFT Gateway as Your Proxy Gateway: 1- Secure Inbound ports to your network: Your file servers (e.g., FTPS, SFTP, HTTPS, and AS2) can be kept securely in your internal network with GoAnywhere's secure file gateway. This allows you to keep inbound ports to your network closed, which is essential for complying with data security standards. 2- Keep critical data out of the DMZ: Files can be safely shared with trading partners, users, clients, and vendors while avoiding having critical documents or files stored, even temporarily, in your DMZ. 3- Connect with external systems securely: As a forward proxy, Gateway can make connections to external systems on behalf of users and applications in the private network. This allows you to more easily manage file transfers from your firewall. Additionally, the identities and locations of your internal systems are hidden for better security. 4- Run on any environment or operating system: GoAnywhere Gateway is a platform agnostic, software-only secure file gateway solution. Install it on Windows, Linux, AIX, UNIX, or other operating systems to enhance file security in whatever environment works best for you. GoAnywhere Gateway Features At-A-Glance: -No incoming ports need to be opened into the private network -User credentials, permissions, certificates, and keys are kept safe in the private network -Hides the locations and identities of internal systems -Services configurations are maintained/stored in the private network -Supports FTP, FTPS, SFTP, SCP, HTTP, HTTPS and AS2 file transfer protocols -Built-in load balancer to distribute workloads across multiple systems In essence, when added to GoAnywhere MFT, GoAnywhere Gateway serves as a transparent interface between internal systems and external systems without exposing sensitive files or your private network. CLOUD CONNECTORS The Cloud Connectors Module (which requires Advanced Workflows) enables built-in integrations that seamlessly support the automation of data between web and cloud applications and your GoAnywhere MFT projects and workflows. Cloud Connectors, also known as cloud integrations, are built-in web and cloud application integrations that connect to your GoAnywhere MFT projects and workflows. GoAnywhere Cloud Connectors offer a variety of use-cases and benefits if your organisation connects with external apps. We offer out-of-the-box connectors for popular services including Salesforce, SharePoint Online, Microsoft Dynamics 365, Box, and Dropbox. How Cloud Connectors Work Once a Cloud Connector is installed, you can configure the connection properties as a GoAnywhere Resource. With this resource, you only need to specify the connection once before being able to seamlessly reuse it in any of your workflows and cloud file transfers. Your Cloud Connector definition contains all the actions required to communicate with cloud applications. In GoAnywhere, these actions appear as elements located under the Cloud Connector in the GoAnywhere Project Designer. Elements can be incorporated into your workflows alongside other project tasks. GoAnywhere supports a great many cloud application integrations, so you can automate your processes between multiple web and cloud services at once. -Alibaba Object Storage Service -Amazon Cloud Trail -Amazon CloudWatch -Amazon EC2 -Amazon ECS -Amazon Lambda -Amazon SNS -Amazon SQS -Atlassian JIRA -Automate Plus -Azure Data Lake Storage Gen1 (superseded by the -Azure Data Lake Storage Gen2 connector) -Azure Data Lake Storage Gen2 -Azure Storage Queue -Box -Citrix ShareFile -Dropbox -Egnyte -GateScanner CDR -GoAnywhere Command -Google Cloud Storage -Google Drive -Google Translate -JAMS -Jenkins -Microsoft Dynamics 365 Business Central -Microsoft Dynamics 365 CRM -Microsoft OneDrive -Microsoft Sharepoint Online -Microsoft Sharepoint On-Premise -OPSWAT MetaDefender -Salesforce -ServiceNow -SMA OpCon Scheduler -SOS Berlin JobScheduler (online version not supported) -Trello -Veeva CRM -Votiro -Webdocs -Zendesk (online version not supported) ote: Cloud Connectors can integrate with available on-premise and online versions of third-party software unless otherwise noted. Cloud Connector Marketplace Finding new cloud application integrations for your environment is easy. With GoAnywhere MFT’s Cloud Connector Marketplace, users have access to many of the industry’s most popular APIs, including Jenkins, JIRA, Trello, Zendesk, and Google Cloud Storage. Custom connectors can be also designed using GoAnywhere’s Cloud Connector Designer—no coding or programming experience necessary. In addition, new GoAnywhere connectors can be downloaded without needing to update the software. Current GoAnywhere customers can access the Cloud Connector Marketplace by logging into their admin interface in GoAnywhere, then navigating to System > Add-Ons and click "Browse Marketplace." GoFast GoFast is a file transfer acceleration protocol in GoAnywhere that can transmit data considerably faster than traditional FTP. The high transfer rate in GoFast is achieved by using lightweight UDP (User Datagram Protocol) channels to broadcast data packets between the client and server. UDP is much faster than TCP based protocols like FTP and SFTP since it does not have the inherent time delays for acknowledging and synchronising data packets. UDP has traditionally been used for streaming content that requires high throughput, such as live video and audio. GoFast has also harnessed the efficiency of UDP while providing innovative methods to guarantee the delivery and quality of data transmissions. How GoFast Works Before files are transferred, a secure SSL/TLS control channel is first established over TCP between the GoFast server and client. This control channel can be authenticated with user credentials, as well as X.509 client and server certificates. After authentication, commands are sent over the control channel to indicate details about the transmission such as the file names and sizes, encryption ciphers and compression settings. Files are then broken into multiple parts and transferred over UDP data channels between the GoFast client and server. The part sizes can be adjusted to optimise speeds based on the reliability of the network. The file parts are automatically reassembled on the destination and saved to the designated folder locations. Guaranteed Delivery If any parts of a file do not reach the destination successfully, the sender will be instructed to retransmit those missing parts until the entire file is received. To further guarantee the integrity of the transmission, checksums (hashes) can be calculated on both the GoFast client and server for the files transferred. The files can be automatically resent if the client and server file checksums do not match. Encryption A GoFast session can be configured to use AES encryption for protecting data packets, which is important when sending confidential files over the internet or other unsecured networks. AES is a popular encryption standard and is approved by the National Institute of Standards and Technology (NIST) for protecting top secret information. If you are transmitting data over protected networks, you can disable encryption to further optimise transfer speeds. Compression File parts can optionally be compressed with the ZLIB standard to minimise the amount of bandwidth utilised by GoFast transmissions. Nine different compression levels are supported, which can be selected by the administrator at the time of transmission. Additional Features of Accelerated File Transfer: -Schedule GoFast file transfers to run automatically -Send and retrieve multiple files per GoFast session -Auto-retry failed connections with user-specified thresholds -Auto-resume failed transmissions when the server becomes available -Encrypt data packets with AES-128, AES-192 and AES-256 bit ciphers -Verify integrity with MD5, SHA1, SHA256, SHA384 and SHA512 hash algorithms -Suffix and prefix file names with constants, timestamps or variables -Override file names and other properties at execution time using variables -Auto rename files if they already exist at the destination location -Configure port ranges used by the GoFast server -Send alerts for transfer failures via email, text messages and system messages -Log all GoFast file transfers in a central database for auditing and reporting. GoFast Workflows GoFast server connections can be pre-defined in GoAnywhere MFT's Administrator as reusable Resources which can be selected from simple drop-down menus. GoFast Tasks can be placed within GoAnywhere MFT workflows and executed as part of a cohesive process. For instance, a workflow could be defined to retrieve a video file, encrypt the video, and then quickly send the video to a trading partner using the GoFast accelerated file transfer protocol. PeSIT Client The PeSIT Client Module helps meet standards and accepts communications from the European banking industry. GoAnywhere’s PeSIT server can be used alongside our PeSIT Client, which allows for communications initiation. The PeSIT client helps guarantee delivery of PeSIT transfers with options to auto-retry connections, auto-resume interrupted file transfers, and perform integrity checks of successful file transfers. PeSIT Features in GoAnywhere MFT: -Full support of the standard PeSIT command set -Send & Receive files -Specify Maximum Data Block Lengths per transfer -SSL Certificate Server Authentication -Suffix and prefix file names with constants, timestamps or variables -Override file names and other properties at execution time using variables -Configurable port ranges -Alerts for transfer failures via email, text messages and system messages. PeSIT Resource PeSIT server connections can be pre-defined in GoAnywhere MFT's Administrator as reusable Resources which can be selected from simple drop down menus. PeSIT Tasks can be placed within GoAnywhere MFT Projects and executed as part of a cohesive workflow process. For instance, a Project could be defined to retrieve records from a database file, convert the records into a CSV file, and then put the CSV file onto a PeSIT server. File Filtering When sending or receiving files via PeSIT, the files selected can be included and excluded using various filter criteria: -Wildcards (i.e. "trans*.txt" or "*.xls") -Regular expressions -Date and time range -Size range -Variables passed to the Project PeSIT Logs Audit trails (logs) are generated for all PeSIT transmissions in GoAnywhere MFT to meet auditing and compliance requirements. The level of log detail can be controlled by an administrator on a per-Project basis. This detail can be configured to include all PeSIT commands issued, PeSIT messages and file names transferred. Log messages can additionally be sent to a Syslog server using UDP or TCP connections. PeSIT Server The PeSIT Server Module provides for full support of the standard PeSIT command set (sends and receive files, specifies Maximum Data Block Lengths per transfer, SSL Certificate Server Authentication, transfers multiple files per connection, file transfer templates, and more). Audit trails or logs are generated for all PeSIT transmissions in GoAnywhere MFT to meet industry auditing and compliance requirements. PeSIT Server Features: -Full support of the standard PeSIT command set -Send & Receive files -Specify Maximum Data Block Lengths per transfer -SSL Certificate Server Authentication -Dynamic file names with constants, timestamps or variables -Multiple listeners with individual port configurations -File transfer templates GoAnywhere MFT can be configured to handle trading partner send and receive requests. Templates can be reused across multiple trading partners that require the same send/receive capabilities. Partner Management Trading partners that want to use PeSIT for file transfers are easily managed with granular permissions. Inbound and outbound file transfer templates can be applied en-mass or individually with each Web User depending on the use case of the PeSIT partner. PeSIT Logs Audit trails (logs) are generated for all PeSIT transmissions in GoAnywhere MFT to meet auditing and compliance requirements. This detail includes commands issued, messages, IP addresses, server IDs, and file names transferred. Audit logs for the PeSIT service can also be used to troubleshoot failed transfers. Contact Us Content Inspection Modules The following modules provide for content inspection of the traffic that flows through GoAnywhere. Data Loss Prevention Document Sanitisation strips out hidden, possibly sensitive data from documents such as properties, which can disclose the author and true date; change histories, which can leak sensitive data that authors believe was removed, such as project details, new product names and prices. Data Redaction overwrites or redacts critical or sensitive information to prevent data breaches. The communication content is modified but is allowed to continue to prevent business process disruption, with sensitive information replaced with a series of Xs. Anti-Steganography adds to GoAnywhere MFT the capability to prevent files, messages, images, or videos from being concealed within another file. Optical Character Recognition is the electronic or mechanical conversion of images of typed, handwritten, or printed text into machine-encoded text, whether from a scanned document, a photo of a document, a scene-photo, or from subtitle text superimposed on an image. Threat Protection Anti-virus features integrated Sophos and/or Avira anti-virus, with automatic updates every 15 minutes to provide the latest protection. Structural Sanitisation removes any active content such as scripts, coding, etc. from sent files. Information is, however, left intact in its original file format. We also offer a free FTP Client & Server.
- Protect your data from AI’s insatiable appetite | GSA
< News Protect your data from AI’s insatiable appetite 14 Apr 2026 AI-driven scrapers harvest vast amounts of web content to train models, often without consent. This can erode revenue, expose proprietary and private information, and create security risks as bots probe forms, logins, and APIs. Unchecked scraping not only risks your valuable business intelligence and intellectual property, it also fuels downstream misuse of your content and customer data. More serious than lost page views and duplicated content inhibiting SEO, AI scraping can lead to privacy breaches and automated attacks that exploit exposed endpoints. Legal remedies are slow! Technical controls should be your first line of defence. How to protect your site and data • Audit and classify sensitive endpoints such as forms, APIs, and subscriber content. • Harden access with authenticated APIs, strict Cross-Origin Resource Sharing, and robust rate limits. • Use bot management and Content Delivery Networks that detect behaviour-based scraping and block suspicious traffic at the edge. • Deploy CAPTCHAs, honeypots, and fingerprinting to distinguish humans from automated agents. • Monitor and respond with IP blocking, anomaly alerts, and takedown processes when misuse is discovered. Add MFT to your Defences Managed File Transfer (MFT) provides a secure, auditable channel for moving files and sensitive data between systems and partners. MFT platforms, such as the industry-leading GoAnywhere MFT , offer end-to-end encryption, role-based access, detailed audit trails, and automated workflows that reduce ad-hoc file sharing. They can close common gaps that scrapers and opportunistic bots exploit. Modern MFT solutions also simplify compliance with regulations by centralising transfer policies and logging, and they outperform legacy FTP/SFTP setups by adding visibility and automated validation. For organisations handling high volumes of sensitive transfers, MFT reduces risk while improving operational reliability and incident response. Layer IT Up Protecting content in the AI era requires layers: legal notices and copyright may help, but technical controls - rate limits, bot detection, continuous monitoring, and secure transfer platforms like MFT - stop most AI scrapers before they can create a problem. Start with a risk inventory and add MFT everywhere that file movement is business-critical. Help Right Here Generic Systems Australia is Fortra’s #1 GoAnywhere Partner in Australia and New Zealand, with decades of experience enabling organisations to become more efficient, organised and protected. Our Migration Service makes transitions even easier. If you’d like a no-cost, no-obligation discussion about how we could help you simply and affordably adopt an advanced MFT solution, please feel welcome to get in touch with our Business Manager, Bradley Copson. Previous Next
- Legacy Tech Threatens Your Valuable Data | GSA
< News Legacy Tech Threatens Your Valuable Data 17 Mar 2026 The Australian Signals Directorate (ASD) has published a warning about the cyber security threat posed by legacy technology. ASD defines legacy technology as “any technology no longer supported by the manufacturer, developer or vendor”. These technologies don’t receive important security updates and patches, and this makes them much more vulnerable to cyber attacks. However, the threat isn’t only to the legacy systems themselves. Cyber thieves can also exploit vulnerabilities in legacy technology to gain access to the modern systems that your organisation relies on. The ASD says that managing legacy technology is a priority in maintaining the overall cyber security of your organisation. They counsel replacing it with technology that is still receiving support and updates from the manufacturer, developer or vendor. Legacy Scripts A related example of a legacy technology that’s way past it’s use-by date is the use of file transfer scripts to move sensitive data between systems. For years, organisations relied on home‑grown file transfer scripts to shuttle data between systems, partners, and applications. Scripts were simple, cheap, and easy to tweak. However, in today’s environment - where security needs are heightened, data volumes more immense, and compliance obligations mandatory - these scripts have quietly become legacy technology. Their limitations aren’t just inconvenient; they introduce operational and security risks that modern organisations should no longer tolerate. Scripts are brittle by design. A small change in a directory name, a certificate expiry, or a vendor endpoint can cause silent failures. Because scripts rarely include centralised logging or alerting, teams often discover issues only after a downstream process breaks. This reactive approach to failures is the opposite of what modern IT environments require. Add in the fact that scripts are usually maintained by a handful of individuals—often without documentation—and you end up with a fragile web of tribal knowledge that becomes a liability when staff move on. Scripts are also inherently insecure. Hard‑coded credentials, inconsistent encryption practices, and ad‑hoc error handling create gaps that attackers can exploit. Regulators increasingly expect organisations to demonstrate control, auditability, and governance over data movement. Scripts simply weren’t built for that world. Modernise with MFT Managed File Transfer (MFT) platforms like the class-leading GoAnywhere MFT solve these problems by replacing scattered scripts with a centralised, policy‑driven system. MFT provides end‑to‑end encryption, automated workflows, real‑time monitoring, and detailed audit trails. Instead of relying on custom code, organisations gain a consistent, supportable framework that scales with business needs. MFT agents extend this capability to remote servers and cloud environments, enabling secure, automated transfers without manual intervention. Replacing legacy scripts with MFT isn’t just an upgrade - it’s a strategic shift toward reliability, visibility, and security. It frees teams from maintenance drudgery and provides organisations the confidence that their critical data flows are controlled, compliant, and future‑ready. Here to Help At Generic Systems Australia, we are Australia’s and New Zealand’s experts in MFT. Our decades of experience and unparalleled expertise have made us Fortra’s Top MFT Partner for the world’s leading MFT solution, GoAnywhere , in Oceania. If you’d like a no-cost, no-obligation discussion about how we could help you simply and affordably adopt an MFT solution, please feel welcome to get in touch with us . Previous Next
