Free FTP Server and Client Helps Businesses Improve Security and Audit File Transfers

GoAnywhere MFT's integrated FTP Server and Client for automating and auditing file transfers is now available as a Free Edition of the enterprise-class Managed File Transfer solution. 

GoAnywhere Managed File Transfer Free FTPThis free FTP software can be installed on a variety of platforms including Windows, Linux, Mac OS, UNIX and IBM i, providing flexibility to organizations of all sizes.  GoAnywhere MFT improves FTP security with features like AD authentication, granular folder permissions, password policies to comply with PCI DSS, brute force and DoS attack monitors, and IP blacklists/whitelists.

"Legacy FTP servers are lacking the security controls, user management and detailed audit logs needed to comply with regulations like PCI DSS and HIPAA" says Bob Luebbe, Chief Architect at Linoma Software.  "With the free edition, any organization can now take advantage of the comprehensive FTP features in GoAnywhere MFT."

Using the free FTP client from GoAnywhere, organizations can add automation to their file transfers.  The ability to schedule transfers and scan for new or modified files on local or remote systems reduces manual processes and the risk of human error.  This saves time and money while improving productivity through reliable data delivery.

The GoAnywhere FTP server makes it possible to set access controls and generate detailed audit logs on all file transfer activity.  This offers a layer of regulatory and policy compliance to organizations currently using FTP to exchange files with trading partners.

GoAnywhere MFT is an on-premise solution that provides centralized control over data access. There are no upfront costs or renewal fees for this fully scalable FTP solution. GoAnywhere MFT can be easily upgraded to meet the changing needs of any business through the purchase of secure file transfer protocols, integrated Open PGP encryption, advanced workflows and in-depth reporting.

This free software installs in minutes and is available for download from the GoAnywhere website at https://www.goanywhere.com/free-ftp.

What is AS2?

Applicability Statement 2 (AS2) is a popular file transfer protocol that allows businesses to exchange data with their trading partners.

AS2 combines the use of several secure and widely used technologies including HTTPS, SSL Certificates, S/MIME, and file hashing. By utilizing the strengths of each of them, AS2 has become the preferred protocol in many organizations for exchanging sensitive EDI files.

AS2 messages can be compressed, signed, encrypted and sent over an SSL tunnel making the file transfers very secure. And receipts can be sent back to the sender ensuring the messages were delivered successfully. The receipts can be digitally signed and will contain a checksum value that the sender will use to verify the message received is identical to what was sent.

Key Features of AS2

  • Message Encryption - By using the recipient's public certificate, the AS2 message contents can be encrypted to keep the data secure. Only the recipient will be able to decrypt the contents using their private certificate.
  • Digital Signatures - The message can be signed using the sender's private certificate which allows the recipient to verify the authenticity of the sender. The receipt that is sent back to the sender can also be signed to ensure the identity of the recipient's system. These digital signatures are used for message integrity and non-repudiation of origin. They are typically used in addition to authentication using a user name, password, and/or certificate.
  • Compression - In order to improve transmission time, compression can be added to decrease the size of the message.
  • Receipt - The Message Disposition Notification (MDN, which is commonly referred to as a receipt) plays an important role in AS2 as it acknowledges that the recipient received the message. It can also be used to verify the identity of the recipient when the receipt is signed. Receipts that are sent back immediately over the same connection are referred to as a synchronous MDN. Receipts can also be sent back at a later time in asynchronous mode. This allows the recipient to process and verify the data before sending back a status to indicate if the transaction was successful.
  • Message Integrity Check - The recipient will calculate a checksum of the message using MD5, SHA1, or a SHA2 hashing algorithm. This value is referred to as the MIC and is shared with the sender by placing it in the receipt. The sender will calculate a checksum as well using the same algorithm. These two values are then compared to guarantee that the message sent is identical to the message that was received.
  • Non-repudiation of Receipt -The use of signatures on the message and receipt creates a Non-Repudiation of Receipt (NRR) event, which is considered legal proof of delivery.

Challenges with AS2

Both organizations will need an AS2 solution in order to exchange data. Due to the complex nature of the AS2 protocol with encryption, signatures, and receipts; it is possible that there can be compatibility issues between two separate products. Fortunately, Drummond Group has a rigorous program that validates an AS2 product follows the RFC 4130 standard and is interoperable with other certified products. Using a Drummond Certified solution, and requiring your trading partners do as well, alleviates the challenges of AS2 and allows you to focus on the business aspects of data transfers.

GoAnywhere MFT is Drummond Certified™ for AS2 and supports SHA2 algorithms for stronger security, chunked transfer encoding to handle large files, multiple attachments per message, and filename preservation.

Linoma Software's GoAnywhere MFT Now Drummond Certified™ for AS2

Linoma Software™ is recognized among 13 global organizations to be Drummond Certified™ in the AS2-3Q15 automated interoperability test event.  The AS2 automation features in Linoma's managed file transfer solution, GoAnywhere MFT, were reviewed and tested against the world's highest standards, as set by the Drummond Group, LLC.  Drummond Certified™ products are compliant and interoperable to make sure they truly interface with the systems of customers and partners.

Drummond Certified™ AS2-3Q15AS2 (Applicability Statement 2) is one of the most popular methods for transporting data securely and reliably over the Internet.  With it, businesses can easily exchange data (like EDI, XML, documents, PDFs, and text files) with trading partners.

"Although GoAnywhere has supported AS2 for quite some time, our customers were telling us that becoming Drummond Certified™ would help them in meeting trading partner requirements." commented Bob Luebbe, Chief Architect at Linoma Software. "To be Drummond Certified™ means being part of an elite group of software solutions, and one of the few that can also offer on-premise file collaboration and managed file transfer capabilities too."

In addition to becoming certified an AS2-3Q15 product, further testing of GoAnywhere MFT confirmed its compatibility with RFC 4130 and verified compliance with optional profiles for:

  • FN (Filename Preservation)
  • MA (Multiple Attachments)
  • FN-MA (Filename Preservation with Multiple Attachments)
  • CTE (Chunked Transfer Encoding)
  • SHA2 hash algorithms supporting SHA256, SHA384 and SHA512

A report listing the test results and technical parameters of a specific test may be downloaded from the www.drummondgroup.com website.

Decision Time for Organizations Facing IBM Sterling Connect:Enterprise End-of-Life

Users of IBM Sterling Connect:Enterprise were notified in January of this year that an end-of-life date had been set for the product.  A 16-month window was set to allow customers time to migrate to a replacement Managed File Transfer product. 

IBM Sterling Connect:Enterprise -End of Road DetourThe April 30, 2016 support deadline is fast approaching and failure to act has the potential for severe consequences. Operating mission-critical file transfer processes on an unsupported product can put operational continuity at risk, and an outright failure could irreparably damage relationships with trading partners.  It is critical for organizations to find an alternative to Connect:Enterprise and develop a migration strategy soon.

Options for Migration

IBM recommends that customers migrate over to another Sterling replacement, however this is not your only Managed File Transfer option.  Consider the following:

  • Be sure to evaluate the true cost of the alternative when factoring in staff and consultant time for migration, maintenance, and training.
  • What is the realistic timeline for this migration, and how do you mitigate risk if support for Connect:Enterprise expires before the project is complete?

To serve your organization's best interests, it's important to perform your due diligence when finding an alternative for Connect:Enterprise. Besides replacing Connect:Enterprise current functions, this is also the ideal opportunity to determine if there are additional enterprise requirements for batch or ad-hoc file transfers.

Linoma is offering GoAnywhere MFT as an enterprise-level managed file transfer alternative to Sterling Connect:Enterprise. GoAnywhere has an affordable price point with no limits on the number of trading partners.  With an intuitive interface and fast learning curve, Connect:Enterprise customers can convert to GoAnywhere in a relatively short period of time.

GoAnywhere offers centralized control over all transfers, including automation of internal and external file movement, and detailed audit logs with extensive reporting capabilities.  Key points of GoAnywhere are:

  • Affordable purchase price and low cost of ownership
  • Simple installation and operation
  • Responsive customer service and frequent updates
  • Industry standard encryption and protocols including SFTP, FTPS, HTTPS, SCP, Open PGP, ZIP with AES and AS2
  • Multi-platform support

GoAnywhere MFT's intuitive browser-based interface and comprehensive workflow features will help eliminate the need for custom programs/scripts, single-function tools and manual processes that were traditionally needed. This innovative solution improves the reliability of your file transfers and helps your organization comply with data security policies and regulations.

With integrated support for clustering, GoAnywhere MFT can process high volumes of file transfers for enterprises by load balancing processes across multiple systems. The clustering technology in GoAnywhere MFT also provides active-active automatic failover for disaster recovery.

In addition to addressing core data transfer requirements, GoAnywhere also simplifies and secures file sharing and collaboration with its GoDrive module.  Unlike consumer-grade cloud sharing tools, GoDrive provides an on-premise alternative with centralized control and end-to-end encryption.  For ad-hoc transfers, the Secure Mail module makes it easy for employees to send sensitive information and attachments without file size or file type restrictions.  Both provide the security and audit logs needed to achieve compliance company-wide.

Connect with the GoAnywhere team and let us help you explore your migration options and file transfer requirements.

On-premise File Sharing and Collaboration Goes Mobile with New GoAnywhere Apps from Linoma Software

GoDrive secure on-premise enterprise file sync and sharingLinoma Software announces the release of mobile apps for GoDrive by GoAnywhere, its secure on-premise document storage solution that offers users Enterprise File Sync and Sharing (EFSS) capabilities. Authorized users can now synchronize and share documents, photos, videos, and files across Windows and Mac devices, iPhones, iPads, and Android phones and tablets.

GoDrive users have access to files directly from those devices, as well as optionally download files for offline access. The mobile app automatically updates files and folders to the most current version each time a registered mobile device connects to the server.

Designed as an alternative to cloud-based file-sharing services, GoDrive features localized control with on-site file storage to meet compliance requirements and detailed audit trails for ease of management. Files synchronized to GoDrive devices are secured end-to-end using AES 256-bit encryption and dual-factor PIN authorization during device registration ensures complete security for sensitive data. GoDrive provides advanced collaboration features such as file and folder sharing, file-revision tracking, and commenting.

GoAnywhere Apps - GoDrive Mobile Devices

Get Started for Free

Included with each installation of GoAnywhere MFT, Linoma's secure file-transfer solution, are ten free GoDrive user accounts. The browser-based interface helps administrators manage users, security settings, and shared folders. Administrators can also set disk quotas at the system and user level, view disk usage and file histories, and deactivate and eliminate GoDrive folders from lost or stolen end-user devices.

Clustering is also available, providing scalability to support an unlimited number of GoDrive users and files. For active-active networks in which each node has access to replicated databases and server applications, clustering maximizes availability for mission-critical file sharing.

More details on GoDrive by GoAnywhere are available at http://go.linomasoftware.com/godrive.

Linoma Software Releases GoAnywhere MFT 5.1

Release Highlights

AS2 Updates for Drummond Certification:

Last spring, Linoma began AS2 Drummond certification to improve GoAnyhwere MFT's AS2 cross platform compatibility. While Linoma anticipates GoAnywhere MFT will be fully certified by November, GoAnywhere MFT 5.1 includes several back-end updates to ensure compatibility with other AS2 vendors. GoAnywhere customers who rely on AS2 for file transfers can be assured GoAnywhere meets compliance with optional profiles for:

  • FN (Filename Preservation)GoAnywhere MFT 5.1
  • MA (Multiple Attachments)
  • FN-MA (Filename Preservation with Multiple Attachments)
  • CTE (Chunked Transfer Encoding)
  • SHA2 hash algorithms supporting SHA256, SHA384 and SHA512

AS2 security features have become more secure and flexible with two new important updates to Web User Profiles. AS2 now supports dual factor authentication using certificates and passwords, and administration becomes simpler by using the same Certificate SHA1 fingerprint across multiple web users.

Advanced Reporting Updates:

GoAnywhere MFT 5.0 introduced a new advanced reporting engine to provide administrators with file transfer, workflow, and system information in PDF reports. MFT 5.1 expands the reporting features by including four new reports:

  • Secure Mail Disk Usage - Displays the Secure Mail disk usage for each Web User sorted by size.
  • Service Activity by Module - Displays all activity for the selected inbound services within the specified date range.
  • Service Errors - Displays all errors for the selected inbound services within the specified date range.
  • Global Activity Details - Displays all activity for the selected features based on the search term provided.

Service Activity Report Example:

Service Activity Report

System Alerts Updates:

GoAnywhere MFT can alert administrators when critical events occur on the system. MFT 5.1 expands the alerting feature to monitor for when Web Users become deactivated, when the connection between GoAnywhere Gateway and MFT has been interrupted, and when a change occurs in a GoAnywhere Cluster.

Command Line Updates:

GoAnywhere Command APIs allows external applications to run file transfers and workflows in GoAnywhere MFT. In GoAnywhere MFT 5.1, new commands have been created to aid users with the migration of features from one installation to another. These commands include:

  • Export Project
  • Delete Project
  • Export Resource
  • Export Schedule
  • Export Monitor
  • Export Trigger
  • Export Web User
  • Export Web User Group

Managing File Transfer Bandwidth:

Bandwidth monitoring and throttling has been added for all Web User and workflows transfers between select FTP, FTPS, and SFTP Resources. This allows administrators to control how much bandwidth is being used by a specific process. A new Active Transfers page displays the current file transfers.

Upgrade Considerations:

  • More information for new features and bug fixes can be found on the Release Notes.
  • GoAnywhere Director and GoAnywhere Services customers that are covered under a Maintenance agreement can upgrade to GoAnywhere MFT at no additional charge.
  • You will be able to enjoy the same licensed features as what you paid for originally.
  • Upgrade scripts are available to download from the Customer Portal at https://my.goanywhere.com.
  • Both GoAnywhere Director and GoAnywhere Servers can be upgraded independently to GoAnywhere MFT.
  • If you own GoAnywhere Gateway, no upgrade is required to that product.

Sign Up for the FREE Secure File Transfer Webinar Series

Linoma Software is hosting a FREE October Webinar Series on the advantages of securing your system-to-system and person-to-person file transfer processes.  Please take a moment to register for one, or both, of these informative live presentations.

Webinar: Get Your FTP Server in Compliance

Get Your FTP Server in Compliance

Are you still running an outdated FTP server in your DMZ? Does your FTP server have the security controls and audit reporting needed to meet the latest PCI and HIPAA compliance requirements?

GoAnywhere goes beyond a typical FTP server by providing the enterprise-level features and security you need to get compliant.

FREE WEBINAR: Now Available On-Demand

We demonstrate GoAnywhere and how to:

  • Use SFTP, FTPS and HTTPS for file transfers
  • Protect files at rest and in motion with AES 256 encryption
  • Set triggers to automatically process files
  • Control access to private and shared folders with granular permissions
  • Generate detailed audit logs and reports

Register Now

3 Advantages of an On-premise Solution for File Sharing

Are you looking for a better solution than cloud-based file sharing services like Dropbox to transmit sensitive company data?

Put an end to employees using unsecure cloud-based file sharing services. Improve compliance and cut the risk of sensitive company data falling into the wrong hands.

FREE WEBINAR: Now Available On-Demand

We cover the three advantages of an on-premise product for Enteprise File Sync and Sharing (EFSS):

  • Local management of user accounts and files
  • End-to-end encryption of files at rest and in motion
  • No monthly user subscription fees or storage limits

Register Now

Join us for these complimentary webinars to get a valuable tour of GoAnywhere MFT. Linoma's engineers will be on hand during the webinars to answer your technical questions.

5 Signs Your Organization is Ready for MFT

Managed File Transfer Levels the Playing Field for SMB

Low-cost file transfer tools allow mid-market businesses to make simple data exchanges both internally and externally.  As your company grows, however, trading partners demand enterprise-level systems to improve reliability and data security. 

cityscape - mft readyManaged File Transfer (MFT) emerged to reduce the cost and programming skills required for you to meet customer requirements and stay competitive in the marketplace. According to an Info-Tech Research Group report on selecting and implementing an MFT solution, there are five signs that indicate your organization could benefit from this technology.

  1. A need for transparency and traceability in file exchange activities
  2. New business relationships mandate adherence to compliance laws and privacy regulations
  3. Traditional methods of sending data, such as FTP, aren't secure
  4. Processes need to be more agile and adapt to changing network conditions
  5. The inability to comply with government reporting requirements

MFT provides comprehensive audit trails and monitoring to document all file transfer activity. Reports generated from this data show every interaction with the files on your server in great detail and allow you to better serve customers by responding quickly when problems do arise.

When security and reporting tools are needed to meet strict regulatory compliance standards of even highly-regulated industries, MFT delivers.  These include the data protection and integrity requirements found in PCI DSS, GLBA, SOX, Dodd-Frank and state privacy laws.

In light of recent high profile data breaches, many organizations have chosen to reduce their risk by seeking alternatives to unsecure FTP.  MFT gives you the flexibility to connect with trading partners using secure protocols and popular encryption methods like SFTP, FTPS, HTTPS, AS2, Open PGP and ZIP with AES.

In addition, automation and simplified workflows offered in many MFT solutions streamline the process of adding and onboarding trading partners. Companies can reduce or eliminate time spent on manual file exchanges and interrupted file transfers, thus reducing administrative costs and assuring the timely delivery of mission-critical data.

To explore MFT further, download this useful checklist to help in your evaluation of vendors and find the best solution for your organization.

Linoma Software Ranks Among Top Companies on the Inc. 5000 List

inc. 5000 - medallionFor the third year in a row, Linoma Software is proud to announce that we were the recipient of the Inc. 5000 award as one of the fastest-growing private companies among America's independent entrepreneurs.  Linoma Software joins 24 high growth companies in Nebraska and is the only software company ranked in the state.

"The story of this year's Inc. 5000 is the story of great leadership. In an incredibly competitive business landscape, it takes something extraordinary to take your company to the top," says Inc. President and Editor-In-Chief Eric Schurenberg.

You can view Linoma Software's listing on the Inc. website and see how other companies scored by visiting: http://www.inc.com/profile/linoma-software

Do Your Homework When Choosing a Managed File Transfer Solution

Linoma Software emerged as an early pioneer in MFT (managed file transfer).  Starting in 2002 with a solution for automating and managing file transfers, capabilities soon expanded to support encryption standards to help organizations protect sensitive and confidential data.

Companies of all sizes quickly recognized how MFT could help them establish centralized control over file access, streamline file transfer processes, and simplify compliance through detailed audit logs and reporting.  This has led to a surge in providers, each with their own flavor of MFT.

This increasingly crowded marketplace has made it difficult for IT security professionals to research and recommend the best MFT solution to meet their organization's particular needs.  That's why Linoma Software's chief architect Bob Luebbe believes so highly in the value of quality research like the recent report on the vendor landscape for MFT by Info-Tech Research Group.

research mft - info-tech-slides-stackedThe Info-Tech report entitled "Select and Implement a Managed File Transfer Solution" gives you the tools to fully explore your organization's requirements for MFT.

"Managed file transfer software is frequently purchased to meet the requirements of one initiative," states Luebbe, "but companies quickly discover the advantages of implementing MFT across all areas of file management."  Proper planning allows you to 'secure file transfers today and avoid worrying about tomorrow'.

Assembling a thorough assessment of system-to-system and ad-hoc file transfers across every department allows you to match current and future demands to MFT providers identified as leaders in those particular areas.

Choosing an MFT solution is an investment of both money and time.  "If you're not 100% confident in the software's ability to communicate with your existing systems and perform to your expectations, that should be reason for concern," Luebbe cautions.

"Install fully functional trial software on your own system, request a personalized demo where you can see the software in action and have the ability to ask specific questions, and always ask for references from customers using the software in a similar fashion."

Luebbe concludes, "Linoma Software believes in MFT's ability to help an organization achieve regulatory compliance, increase security and streamline processes.  It's important to us that everyone has a positive experience with this transformative technology."

Read the entire Info-Tech Research Group report on the MFT vendor landscape for yourself at http://go.linomasoftware.com/infotech2015.