The business needs
include security, automation, High Availability (HA), compliance, and auditing.
When security and
compliance are high priorities, MFT solutions do more than simply secure files
while they’re being transferred. Standard security features in MFT solutions
include:
·
Support for secure
protocols and refusal of unsecure connections
·
Encryption for stored
data and the assurance that unencrypted versions of the file are never written
to the server
·
Perimeter security,
such as a reverse proxy that operates as a pass through and does not
temporarily store data
·
Support for the
current versions of privacy standards, such as PCI v3.1 and HIPAA
·
The ability to support
security policies, such as complex/expiring passwords
·
Hacking detection with
automated shut down of offending users or domains
Automation
File transfers are
often initiated by other systems and servers, rather than end users. Automated
“Push” and “Pull” technology, as well as the ability to automatically sort data
and send to pre and post processing applications, is a key driver in the need
for MFT.
·
Event-driven commands
and notifications/alerts (e.g., “on file upload, do…”)
·
Limited API or
command-line tools for programmatic/scripted user provisioning
·
Integration with a
third-party authentication database (i.e., Active Directory) for automated user
provisioning
High Availability
In business operations
that simply can’t afford downtime due to hardware failure or server upgrades, a
High Availability (HA) environment is required to assure business continuity.
Such features include:
·
Virtual file systems
with user/group-based access controls
·
Multi-tenancy through
logical division of hosts
·
HA deployment with
single-site or multi-site clusters
Compliance
Assuring that the
latest version of compliance standards is implemented in an MFT Server can
protect a business from unintentional compliance violations. MFT solutions
typically offer:
·
PCI compliance for
handling credit card data
·
HIPAA compliance for
addressing medical records
·
SARBOX compliance for
records retention and auditing
Auditing
Understanding how data
is used, and by whom, is an important part of keeping businesses secure and
compliant.
·
Complete auditing
·
APIs to onboard users
and extend or integrate the application
·
Integration with
anti-virus
·
Enough security to
meet PCI DSS, FISMA, and other regulations
Other Features
MFT goes well beyond
the list of common features outlined here. MFT solutions may include workflow,
connectors to popular back-end systems, data loss prevention (DLP), Enterprise
File Sharing (EFSS), and more. In choosing a solution, it’s important to
determine the goals for your implementation and understand how the MFT
functionality will be used.
Comments