BlueFinch-ESBD

15th anniversary: two memorable days with our customers and partners!

Éloïse Gruber — Wed, 28 Oct 2026 13:53:14 +0000

Our first 15th-anniversary celebration in the Netherlands

On 15 October, we celebrated 15 years of BlueFinch-ESBD with our customers and partners at Buitenplaats Kameryck. It was a wonderful afternoon filled with inspiring presentations, great conversations and, of course, some friendly competition during our clay shooting activity!

We were delighted to celebrate this milestone together with the people who have been part of our journey. A big thank you to everyone who joined us and helped make the event such a success. Your trust and collaboration have played an important role in our journey over the past 15 years.

Curious to see how we celebrated? Take a look at the some of the photos below to see the highlights of the day!

Here’s to the next chapter of BlueFinch-ESBD!

BlueFinch-ESBD France is celebrating its 15th anniversary with its customers

On 22 October 2026, we held a small gathering with our clients in Paris to celebrate BlueFinch-ESBD’s 15th anniversary.

It was an opportunity to unveil the new developments and ambitions for 2027 with GoAnywhere, while admiring the twinkling lights of the Eiffel Tower.

Quick reminder of the programme:

Introduction – Welcome address and a look back at BlueFinch-ESBD’s journey
Threpoly – A brief demonstration of the new MFT observability solution
RETEX – Live customer feedback session by André Merlier from France Travail
BlueFinch-ESBD at your service – A reminder of our services
Announcements from Fortra – On the road to 2027
Closing – Time to celebrate

After a few presentations, speeches and a feedback session, we naturally raised a glass to mark this anniversary. 🥂

This anniversary therefore marks an important milestone. Our ambition remains the same: to grow hand in hand with our clients and partners, without whom we would not have come this far.

Thank you to our customers for taking part in this event, and a big thank you to André Merlier for his live testimonial.

Thank you to our partner Fortra for its unconditional support over the past 15 years.

We would also like to thank our former founder, Jacques Besnard, for honouring us with his presence.

See you in five years’ time for BlueFinch-ESBD’s 20th anniversary.

Here are a few photos from the event.

Regulations Governing File Transfers

Éloïse Gruber — Tue, 29 Sep 2026 09:36:13 +0000

Many companies and organisations are subject to regulations designed to secure data transfers. In recent years, driven by the exponential growth in data and an increase in data breaches and cyberattacks, these regulations have become significantly more stringent.

Furthermore, international data exchange increasingly requires adaptation to the laws, standards, and protocols of various countries and states. Below are some of the most common examples.

Legislation

GDPR (General Data Protection Regulation): With its implementation in 2028, the GDPR mandates the end-to-end encryption of data both at rest and in transit if the files contain personal data (such as names, bank details, or salary information).
DORA (Digital Operational Resilience Act): Effective since 2023 and applicable from 2025, this is a major European regulation for the financial sector. It mandates strict cyberattack resilience, requiring highly available and audited processes capable of withstanding service disruptions.
eIDAS 2 Regulation (Electronic Identification and Trust Services): This text governs electronic identification and trust services within the European Union. When using a protocol such as EBICS TS to send banking files, the file’s electronic signature must rely on “qualified” certificates as defined by eIDAS. This ensures indisputable legal value before any European court in the event of a payment dispute.
NIS 2 (Network and Information Security Directive): Covering the European Union, the NIS 2 directive—which has reinforced NIS 1 since 2026—compels member states to strengthen their cooperation regarding cyber crisis management. Notably, it provides a formal framework for the CyCLONe (Cyber Crisis Liaison Organisation Network), which brings together ANSSI and its European counterparts. ANSSI provides the Référentiel Cyber France (ReCyF), which lists recommended security measures.
HIPAA (Health Insurance Portability and Accountability Act of 1996): A US federal law requiring national standards to protect sensitive patient health information against disclosure without the patient’s consent or knowledge. The US Department of Health and Human Services (HHS) published the HIPAA Privacy Rule to implement these requirements. The HIPAA Security Rule protects a subset of information covered by the Privacy Rule.
Sarbanes-Oxley Act (SOX – Section 404): Mandatory for all US-listed companies and their global subsidiaries. It requires that all financial reports be accurate and protected. Organisations must maintain strict “internal controls” and be able to legally prove that no user (including a system administrator) could have modified a bank transfer file between the time it was generated by the ERP and its arrival at the bank.

Standards

PCI-DSS: Mandatory if MFT (Managed File Transfer) files carry credit card data (card numbers, security codes). It imposes network segmentation and strict encryption key management.
ISO Standards: An international certification framework, most notably ISO 27001, which defines the requirements for establishing an ISMS (Information Security Management System). ISO 27002 serves as a catalogue of control measures to achieve this, such as encryption, monitoring, access management, and network security.
SOC 2 (System and Organisation Controls): A US standard (issued by the AICPA) that has become a global benchmark, particularly if you use an MFT solution in SaaS/cloud mode or operate data flows on behalf of third parties. SOC 2 evaluates systems based on five “Trust Services Criteria”.
SEPA (Single Euro Payments Area): The standard for all Euro-denominated transfers and direct debits within the European zone. It is natively based on the ISO 20022 standard but adds specific management rules (execution times, BIC and IBAN formats).

Protocols and Contractual Obligations

Protocols are generally divided into two categories: banking-specific protocols (which manage order signatures) and technical transfer protocols.

SWIFT Network: Operating globally, SWIFT acts as an intermediary, facilitating the transport of messages containing payment instructions between financial institutions. SWIFT transmits over 25 million transactions every day.
PeSIT: Standing for Protocole d’Echanges pour un Système Interbancaire de Télécompensation, PeSIT is a file transfer protocol developed by the French GSIT. It is primarily used to meet European banking standards and facilitate communications between banks in Europe. PeSIT (and its iterations) remains a major standard at the heart of French clearing infrastructures.
AS2, AS3, and AS4: These protocols are used to securely send sensitive files.
- AS2 is used to transmit confidential data reliably over the internet, utilising digital certificates and encryption standards to protect information in transit.
- AS3 is a standard capable of transmitting virtually any file type. It provides an extra layer of security through digital signatures and data encryption, having been originally created for XML and EDI data files.
- AS4 allows companies to exchange data securely. As a business-to-business (B2B) standard, it helps make document exchange simple and secure over the internet. Furthermore, AS4 has been recommended and adopted in France for new directives regarding mandatory electronic invoicing. Electronic invoicing applies to all purchases and sales of goods or services between businesses established in France that are subject to VAT.
FTP: While the most widely used standard file transfer protocol for decades is not secure, as all data is transferred in clear text. SFTP and FTPS are its successors—more modern protocols that provide enhanced security through the use of encryption.

How can managed file transfer help your business?

MFT, or managed file transfer, is the solution of choice for businesses that handle large volumes of data and must comply with strict regulatory requirements.

Managed file transfer enables you to meet regulatory requirements for the secure transfer of files between different applications through:

Simplified integration: secure connection of workflows between your various departments.

Access management and monitoring: strict control of access rights, audit logging and activity reports.

Scalability and flexibility: rapid implementation and the ability to adapt to new regulatory requirements.

Find out how MFT and the GoAnywhere solution can help you achieve regulatory compliance.

Vores IT-tjenester

Éloïse Gruber — Thu, 13 Aug 2026 09:08:36 +0000

BlueFinch-ESBD Services Offer

With a growing number of systems and partners to integrate and a multiplicity of protocols, the time required to maintain your Managed File Transfer (MFT) system can sometimes overwhelm internal teams.

To remedy this situation, BlueFinch-ESBD offers a managed services solution that allows you to save time, save money, and entrust your MFT systems to experienced technicians who specialise in the field.

Our team works with MFT daily and is in constant contact with the solution development teams. This experience enables us to design a solution tailored to your company.

Delegate the management of your MFT to us for greater peace of mind, security, and traceability!

By entrusting the management of your MFT needs to our team of experts, you free up time for your IT team, allowing them to focus on other projects or tasks.

Our team, composed of vendor-certified experts, possesses in-depth expertise in the technology, industry best practices, and extensive knowledge of evolving MFT platforms.

We constantly stay at the forefront of innovation by monitoring solution updates, new features, and ways to improve the product.

We supervise your MFT solution, upgrade it, and maintain it as needed to keep you up to date and ensure the best possible protection for your files.

The service adapts perfectly to companies of all sizes, scaling up or down according to the evolution and flexibility of your needs.

Finally, our team based in France and the Netherlands enables us to offer unmatched support levels and maintain excellent response times.

Experts always give good advice!

The Various BlueFinch-ESBD Services

Updates

Your MFT is not up to date? Don’t panic!

Our specialists are here to support you in installing the latest software version and verifying that all new features are correctly configured.

After backup advice and executing the update, we ensure that the new configuration is identical to the previous one and check your file transfer services and automated workflows to ensure everything works perfectly.

BlueFinch-ESBD expert consultants are frequently called upon by our clients for this type of mission.

You are thus guaranteed that the version upgrade will be fast and secure and that your MFT will get a fresh new look in no time!

Audit

How to ensure your MFT always matches your usage?

Indeed, the solution installed a few months or even years ago has likely not kept pace with your organisation’s evolution, so a quick check-up is in order!

Also, analyse the security and reliability of your product configuration by requesting a health check.

This service provides a detailed review of your current configuration and settings. We will check the number of licences, available workspace, and task logs while guiding you through the adjustment of each component.

An analysis of your file transfer volumes and a review of use cases will also be conducted.

At the end of the health check, we provide an audit report on the system and a list of recommendations to optimise the use of the solution.

You thus have the certainty that your MFT matches your needs and that your file transfers are optimised and in perfect health!

Migration

Your operating system is obsolete? Moving data centres? Migrating to the Cloud?

An MFT server migration involves transferring the entire MFT installation from a source server to a destination server and must be carefully planned and executed to minimise disruption and ensure business continuity.

Our consultants are at your disposal to guide you through this migration and ensure it is carried out safely and efficiently, without data loss.

Our experts will install your managed file transfer solution on its new host, migrate the configuration, data, and licences, and recreate an identical solution ready for end-user access.

Partner integration & management

Creating new partners can help improve the security, efficiency, and flexibility of your file transfer operations and can be important for several reasons:

Expand the partner network: The more partners you have, the more options you have to securely transfer files and data. Creating new partners allows you to expand your network and have additional options.

Reduce risks: If you work with a limited number of partners, you may be vulnerable to service interruptions if one of those partners experiences availability or security issues. By creating new partners, you can spread the risk and avoid putting all your eggs in one basket.

Improve efficiency: With more partners, you can often improve the efficiency of your file transfer operations by using more direct transfer paths or distributing the load among different partners.

Adapt to change: Partners change often. Being able to add new ones quickly to adapt to these changes or update existing partners can be important.

Thanks to their expertise in the field, our MFT specialists are here to help you with this process or do it for you.

Training

Develop your MFT skills and ensure business continuity through your knowledge

It is essential to maintain the knowledge level of the teams using your MFT solution, strengthen their skills, or train new employees to secure file transfers and thereby avoid data breach risks.

To help you in this endeavour, BlueFinch-ESBD has developed a comprehensive training programme that can be adapted to your needs, your company’s usage, or your team’s knowledge level.

As experts specialised in this technology, we are best positioned to help you ensure that your staff is fully trained on your chosen Managed File Transfer (MFT) tool, capable of both using the software and providing support.

Thanks to our training catalogue, we offer remote or on-site courses tailored to your needs.

Knowledge of security technologies such as encryption, integrity verification, and security certificates will hold no secrets for your team.

Your staff will master MFT solution features such as transfer scheduling, transfer status management, error notification, and security monitoring.

Creation and Management of Flows

Do you need to automate processes from your MFT and lack the time or know-how?

Whether for regular file transfers between remote servers, automating payment processing workflows, invoicing, or employee payroll, the possibilities are numerous!

Automatically sending files via secure email, notifying users when files are successfully downloaded or transferred, or automatically creating database backups at regular intervals and sending them to a secure location will no longer be obstacles.

For many years, our consultants have created thousands of flows for our clients. Entrust this task to our experts!

The Advantages of Managed Services

Free up your IT teams: Allow your team to focus on internal support and projects that enhance your business, while we take care of your specialized secure file transfer (MFT) needs.

Stay in tune with innovation: Our MFT experts continuously monitor new solution versions and features, helping your organization move forward.

Scales with you: The service adapts to all types of businesses and can be scaled down or up based on your needs.

Managed by industry-leading experts: Our team consists of vendor-certified CFTP* experts who possess in-depth knowledge of the technology, industry best practices, and hands-on experience with evolving MFT platforms.

Stay up to date: We will monitor your MFT solution, upgrade it, and maintain it as needed to keep you ahead of the curve and guarantee the best possible protection for your files.

Need additional information ?

You can also take a 15-min appointment directly on our experts’ agenda.

Schedule online

The Royal Danish Library automates the collection of digital cultural heritage with Managed File Transfer (MFT)

Éloïse Gruber — Fri, 10 Jul 2026 09:46:36 +0000

Swedish brewery Spendrups saves valuable time working with GoAnywhere Managed File Transfer (MFT) software

Éloïse Gruber — Fri, 10 Jul 2026 09:43:08 +0000

What are the different types of file transfer protocols available?

Éloïse Gruber — Fri, 10 Jul 2026 09:41:51 +0000

Before implementing a secure file transfer solution, it is good to know the basics of protocols that are involved in the secure transmission of data.

FTP

The FTP file transfer protocol is a popular transfer method that has been around for decades. FTP exchanges data using two separate channels: the command channel to authenticate the user and the data channel to transfer files.

However, these two FTP channels are not encrypted, which implies that the data sent has a risk of being exploited even if it requires a username and password to authenticate access.

FTPS

Short for FTP, FTPS is a secure file transfer protocol that allows you to transfer files securely through SSL/TLS (Secure Sockets Layer/ Transport Layer Security). FTPS transfers can be authenticated by support methods, such as customer certificates, server certificates and passwords.

SFTP

SFTP stands for FTP part SSH (Secure Shell). This is a secure FTP protocol that is an excellent alternative to unsecured FTP tools or manual scripts. SFTP allows data to be exchanged via an SSH connection that provides a high level of protection for file sharing between systems, cloud, collaborators, etc.

TFTP

Like FTPS and SFTP, TFTP is based on the FTP protocol. TFTP (Trivial File Transfer Protocol) is a simple transfer protocol that allows you to send and receive files. TFTP is used when the reliability of the file is known and no security is required when sending or receiving the file because authentication and encryption of the data are not possible. Anyone who knows the path can download the files. This is not the most secure transfer solution.

SCP

SCP, or Secure Copy Protocol, is an older network protocol that supports file transfers between network hosts. It is somewhat similar to FTP, however SCP supports encryption and authentication functions.

HTTP AND HTTPS

The cornerstone of the World Wide Web, HTTP (Hyper Text Transfer Protocol) is the backbone of data communication. It defines the format of messages by which browsers and web servers communicate and determines how a browser should respond to a query.

HTTP uses TCP (Transmission Control Protocol) as a secondary protocol, which is also a stateless protocol. This means that each command is executed independently and no session information is retained by the recipient.

HTTPS (Hyper Text Transfer Protocol Secure) is the secure version of HTTP where communications are encrypted by TLS or SSL.

AS2, AS3, AND AS4

AS2, AS3 and AS4 are all protocols used to send and secure sensitive file transfers.

AS2 is used to reliably transmit confidential data over the Internet. AS2 uses digital certificates and encryption standards to protect information as it transits between systems and networks. AS2 messages can be compressed, signed, encrypted and sent via a secure SSL tunnel.

AS3 is a standard that can be used to transmit virtually any type of file. AS3 provides an additional level of security when transmitting data through digital signatures and data encryption. It was originally created to transfer XML and EDI data files. Unlike AS2, which is a defined transfer protocol, AS3 is a message standard and focuses on how a message should be formatted when transmitting from server to server. Once an AS3 message has been dialled, it can be transmitted via any other protocol (FTP, SFTP, HTTPS, etc.) provided both parties can access where the message was placed.

AS4 allows companies to exchange data securely. It builds on the foundation established by AS2, but works with web services and provides delivery notifications. As a business-to-business standard, AS4 helps make document exchange safe and simple on the internet.

PESIT

PeSIT is the abbreviation for the “Exchange Protocol for an Interbank Telecompensation System.” PeSIT is a file transfer protocol that was developed by the French Interbank Interbank Systems (GSIT) Economic Interest Group. It is mainly used to meet European banking standards and to transfer communications between banks in Europe.

AS2, AS3 and AS4 protocols

Éloïse Gruber — Fri, 10 Jul 2026 09:39:59 +0000

AS2, AS3, AS4 : What are the differences between these protocols?

If you think these three protocols are simply sequential updates from the 1990s’ AS1 protocol you’d be mistaken. Each protocol brings its own distinct features to the data transmission table. Here’s a few key differences between them.

The specifications of AS2

AS2 (Applicability Statement 2) is a protocol specification used to transmit sensitive data securely and reliably over the internet. AS2 supports the encryption of messages between trading partners and vendors via HTTPS. Data is protected with digital certificates and encryption standards while in transit across systems, networks, and locations.

Organizations often choose AS2 over other file transfer protocols (like FTP or SFTP) because of how easily the protocol helps them meet regulatory compliance requirements and trading partner needs. AS2 serves as a standard used to transfer EDI or other data. Advantages include :

End-to-end encryption
Ability to send/retrieve file transfers of any size or volume
Digital signature authentication for senders and receivers
MDN (Message Disposition Notification) alerts to verify messages were successfully received and decrypted
Validation of file integrity with confirmation of successful transfers

What about AS3 features ?

With the AS3 specification, applications communicate EDI data or other information using the FTP protocol. It’s not, however, just the latest and greatest edition of AS2. Rather, AS3 provides a layer of security for data transmission through digital signatures and data encryption.

This specification offers flexibility, security and non-repudiation receipt (NPR), which gives the sender legal proof of unaltered delivery and verification that the message received is identical to what was sent. Other benefits include:

End-to-end data encryption
SSL encryption and hashing
Confirmation of receipts or MDNs
Proof of transaction details
Large file transfer capabilities
Ability to send any data type

Finally, characteristics of AS4!

AS4, the latest option superseding AS2, is an open business-to-business (B2B) standard for securing and exchanging documents between businesses using web services.

AS4 is frequently used for EDI integration projects. Other advantages include:

Used for both client and server (push and pull actions)
Receipts delivered as SOAP (Simple Object Access Protocol) messages with XML digital signatures
Payload agnostic
Combines MIME and SOAP for message packaging (AS2 is purely MIME-based)
Security based on WS-Security standard vs.AS2’s S/MIME specifications

Managed File Transfer Supports AS4, AS3 and AS2 File Exchanges

GoAnywhere MFT is a secure managed file transfer solution that simplifies, streamlines, audits, and automates file transfers across a variety of environments. It provides support for exchanging files via AS4 as well as AS3 and AS2. Using MFT with AS4/3/2 consolidates the whole transfer process and allows for single pane of glass administration as well as auditing capabilities.

Secure File Transfer at Lightspeed

Éloïse Gruber — Fri, 10 Jul 2026 09:36:51 +0000

What is “Fast File Transfer”?

Many organizations still use FTP (File Transfer Protocol) to move large files. Slow and vulnerable to poor network conditions, FTP is legacy technology. International file transfers are especially problematic, frequently disconnecting and almost never reaching full line speed. Predictability and “guaranteed file delivery” are virtually impossible with FTP. FTP exchanges data over TCP/IP (or Transmission Control Protocol and Internet Protocol). This protocol makes accelerating file transfers with FTP difficult if not impossible. From timeouts to latency, TCP presents issues another protocol, UDP, does not.

Let’s take a closer look.

UDP protocol

UDP-based Data Transfer Protocol (UDT) is a high-performance data transfer protocol designed for transferring large volumetric datasets over high-speed wide area networks. Such settings are typically disadvantageous for the more common TCP protocol.

Because file transfers over TCP take so long even with higher bandwidth, UDP has become the standard for accelerated file transfer.

FTP and other TCP-based file transfer systems rely on a guarantee that all sent data is successfully received and in the right order. Over long distances or unreliable connections, these built-in confirmations force TCP to send data slower than the network actually allows. Since UDP doesn’t need such guarantees, file transfer applications can optimize network traffic and avoid potential slowdowns.

Introducing FileCatalyst

FileCatalyst is a robust accelerated file transfer software solution that supports client/server architecture, enabling the fast transfer of large files. FileCatalyst solutions are designed specifically to allow the transfer of large files over remote networks experiencing high latency or packet loss.

FileCatalyst provides FTP alternatives that permits to send files of any size or format at full line speed, hundreds of times faster than FTP, while ensuring secure and reliable delivery.

Each FileCatalyst product serves a unique set of organizational file transfer needs and works across a variety of industries.

On its own, FileCatalyst Direct uses the FileCatalyst Server and a full suite of client options for point-to-point transfers. Combining FileCatalyst Direct with FileCatalyst Workflow provides a complete managed and accelerated web-based solution.

Adding FileCatalyst Central allows you to monitor your organization’s entire FileCatalyst deployment by offering a consolidated web-based view of file transfers on your network.

File Exchanges Simplified with File Catalyst Workflow

FileCatalyst Workflow is a web portal for all your file transfer needs. It simplifies file exchange and boosts productivity by streamlining submission, distribution, and file sharing workflows on the web. Users may submit files to your organization for processing, with full tracking at every stage, or they may securely distribute files to anyone with an email address. Additionally, file areas allow users to store files in your organization’s private cloud for collaboration, with online access from anywhere.

FileCatalyst Workflow creates a web portal for uploading files and collects any information (metadata) needed to process those files (for example, processing instructions or quantity of goods ordered). Files and metadata combined are called a“job”. Jobs may go through any number of phases while being tracked through the system until finally reaching the completed state FileCatalyst Workflow solves the problems of file transfer size and speed by acting as a middleman for the file transfer process. Files are sent to the FileCatalyst Server using acceleration technology. Recipients then receive an email containing a download link. All phases of the file transfer are tracked and managed.

With FileCatalyst Workflow as the central storage location for one or more web folders, users have remote access to shared or personal files from anywhere in the world. Both upload and download are supported, and sharing can be at individual account or group levels. Group folders with individual read/ write permissions can be assigned to any number of users.

Central file transfer management

FileCatalyst Central is a web-based monitoring tool that acts as a united gateway to your entire FileCatalyst deployment. FileCatalyst Central allows you to view ongoing transfers in real-time, drill into transaction histories and reports, view alarms, remotely configure nodes, and initiate file transfers. From a single map view you can inspect connected nodes and remotely control them. FileCatalyst Central provides visibility to all FileCatalyst client applications and server nodes in a single centralized location. Adding additional nodes is easy; no additional network configuration is required for new nodes.

With the solution, you can set a wide variety of alarms for file transfer events, including successful, failed or canceled transfers. Alarms can be configured as SNMP traps or email notifications and can be viewed within FileCatalyst Central.

Moreover, reports are shown in near real-time. The reporting engine handles current and archived transfers with high efficiency. Reports are compiled based on individual nodes, groups of nodes, or sessions. This gives administrators instant insight into critical file transfers and the ability to quickly measure traffic and identify usage patterns.

High-speed file transfers to the cloud

FileCatalyst provides the fastest, most reliable, and most feature rich high-speed file transfer solution for moving data to and from the cloud. FileCatalyst takes cloud migration to the next level with features including automation, native cloud storage integration, and an extensive SDK for integrating accelerated transfers into your own applications. With support for major cloud providers and modern licensing options, FileCatalyst is your best choice for fast file transfers to and from the cloud:

Data migration: FileCatalyst has marketplace listings on AWS, MicrosoftAzure, and Google Cloud FileCatalyst can be used on any other cloud compute platform using the Bring Your Own License (BYOL) model.

Cloud Storage integration: FileCatalyst integrates natively with the most popular public cloud storage providers with speeds up to 5Gbps. AWS S3, Azure Blob, Google Cloud Storage, Dropbox, Wasabi, and Backblaze B2 are all supported. Files are streamed through FileCatalyst without landing on local storage and are transferred at the maximum speed the cloud storage provides.

Multi-cloud acceleration: FileCatalyst alleviates the stress of migrating data into public cloud-based object storage, and exponentially shortens transfer times with its patented file transfer acceleration technology.

Fast File Transfer and Microsoft Azure

Moving data into cloud storage presents challenges for organizations across all industries, and finding a tool that can move data to the cloud as fast as possible is one of the challenges. This is because of a barrier in place stopping users from utilizing the high bandwidth available to them. That barrier is the traditional FTP and HTTP-based solutions used to transfer files across the WAN. Furthermore, these solutions cache files locally and copy them into the cloud as a background process, creating the illusion of speed.

FileCatalyst has the ability to accelerate transfers into Azure Blob storage at multi- gigabit speeds. FileCatalyst Direct writes data directly to Azure Blob storage, allowing the data to be streamed directly without caching. With FileCatalyst, file transfer acceleration is achievable regardless of size, file format, or transfer distance.

Is FileCatalyst a good fit for your organisation?

Make no mistake, FileCatalyst is an incredibly powerful file transfer solution,

designed to accelerate and manage file transfers securely and reliably. FileCatalyst is immune to the effects that latency and packet loss have on traditional file transfer methods including FTP, HTTP or CIFS. Global organizations use FileCatalyst to solve issues related to file transfers including content distribution, file sharing, and offsite backups.

Ask for a demonstration by our expert.

The DMZ ‘s role in secure data transfers

Éloïse Gruber — Fri, 10 Jul 2026 09:26:52 +0000

Files can be safely shared with trading partners, users, clients, and vendors while avoiding having critical documents or files stored, even temporarily, in your DMZ.

But what is this DMZ and what is it used for?

That’s what we’re going to find out in this article.

What is the DMZ and how it works?

The DMZ is the neutral network that resides between the Internet and your organisation’s private network. It’s protected with a front-end firewall that limits Internet traffic to certain systems within its zone. On the back end, an additional firewall resides to prevent unauthorised access from the DMZ into the private network.

The DMZ essentially serves as a staging area between an organisation’s private network and the Internet.

In order to share a document with a trading partner accurately, an internal program or employee would need to first copy the desired file from their private network onto a server in the DMZ. The partner could then download the file from that server using an approved protocol, such as FTP/FTPS, SFTP, or HTTP/HTTPS.

When trading partners need to share documents with an organisation, they would upload the files to a server in the DMZ. Subsequently, an internal program or employee would then scan for the files on the server and pull them into their private network.

How can the DMZ be dangerous and impact security?

Although many organisations exchange files using the DMZ, staging files in a vulnerable location like the very publicly accessible DMZ makes them susceptible to a variety of dangerous attacks from enemy territory.

The DMZ can have a major impact on security if not protected properly. In the event that a hacker gains entry to a file server in the DMZ, they may be able to access and download sensitive data and trading partner files that were placed there. Even encrypted files can be at risk to high-grade attackers if keys or passwords are compromised. There’s also a strong likelihood that any user credentials, certificates, or whatever else is needed for authentication could be maintained in the DMZ, increasing vulnerability.

Also at risk is the file sharing software itself, particularly if it can be accessed from within the DMZ. For instance, let’s say a malicious attacker gains access to your territory by creating a “back door” user account into an SFTP server through its admin console. This user account could seemingly appear as “legitimate” and allow the hacker the opportunity to steal sensitive data files. Audit logs could also be manipulated if they’re stored in the DMZ, allowing the attacker to erase any trail they were ever there.

Secure your DMZ with GoAnywhere Gateway

GoAnywhere Gateway is an enhanced reverse and forward proxy that provides organisations with an additional layer of security for exchanging sensitive data with trading partners.

With Gateway, file sharing services can be kept safely inside your private network, without exposing sensitive data to your DMZ (Demilitarised Zone), and connections can be made to external systems on behalf of users in the private network.

With a DMZ secure gateway, like GoAnywhere Gateway, security concerns are solved by allowing an organisation to move file sharing and other public services from the DMZ into the private network without having to open any inbound ports. This approach keeps data files safe in the private network since they no longer need to be staged in the DMZ. It also helps support compliance with PCI DSS, HIPAA, HITECH, SOX, GLBA, and state privacy laws due to the lack of inbound ports needing to be opened into your private network.

GoAnywhere Gateway also supports FTP, FTPS, SFTP, SCP, HTTP, HTTPS, and AS2 file transfer protocols. With Gateway, file sharing services can be kept safe and secure inside your private network, without exposing data to your DMZ.

Reverse and Forward proxy

The reverse proxy handles inbound requests from trading partners, while the forward proxy takes care of outbound file transfer requests from internal employees and systems. Below more technical details!

Reverse Proxy

A reverse proxy is an intermediate connection point that serves as a gateway between users and your origin server. This type of proxy server retrieves files or other resources on behalf of a client. In the case of GoAnywhere Gateway’s reverse proxy, when an external client (trading partner) connects to a listener on GoAnywhere Gateway in the DMZ, GoAnywhere Gateway will make a request over the control channel to GoAnywhere MFT in the private/internal network. GoAnywhere MFT will then create a new outbound data channel to GoAnywhere Gateway. This data channel will be attached to the desired service (e.g. FTP, FTPS, SFTP, HTTP/s) and all traffic for that session will be routed over this new data channel including client authentication requests, data and commands. When the session is terminated, the corresponding data channel will be removed.

Forward Proxy

Similar to a reverse proxy, a forward proxy also serves as an intermediary between clients and servers; however, forward proxies filter connections going out (where reverse proxies filter connections coming in) from the internet to your servers.

The Forward Proxy in GoAnywhere Gateway allows you to route client requests from GoAnywhere MFT (in the private/internal network) to external FTP, FTPS, SFTP and SCP servers without revealing the identity or locations of your internal systems. The Forward Proxy is additionally used by GoAnywhere MFT to route active and passive FTP and FTPS data connections through GoAnywhere Gateway.

When a process in GoAnywhere MFT needs to make an outbound connection through the proxy, a request is made to GoAnywhere Gateway with the address of the intended destination. GoAnywhere Gateway will then establish the connection to that destination and will bridge it to the requesting system.

Migration XFB Gateway for a PeSIT use

Discover how our super experts proceeded for this customer solution replacement.

PCI DSS about DMZ requirements

GoAnywhere Gateway is an important security component for protecting cardholder data and helping organisations to comply with PCI DSS. By allowing organisations to keep sensitive files and credentials out of the DMZ (demilitarised zone) while not requiring inbound ports to be opened into the internal network, GoAnywhere Gateway is specifically useful for meeting the requirements of PCI DSS:

1.3 Prohibit direct public access between the Internet and any system component in the cardholder data environment.

1.3.1Implement a DMZ to limit inbound traffic to only system components that provide authorized publicly accessible services, protocols, and ports.

1.3.2 Limit inbound Internet traffic to IP addresses within the DMZ.

1.3.3 Do not allow any direct connections inbound or outbound for traffic between the Internet and the cardholder data environment.

1.3.4 Implement anti-spoofing measures to detect and block forged source IP addresses from entering the network.

1.3.5 Do not allow unauthorized outbound traffic from the cardholder data environment to the Internet.

1.3.6 Implement stateful inspection, also known as dynamic packet filtering. (That is, only “established” connections are allowed into the network.)

1.3.7 Place system components that store cardholder data (such as a database) in an internal network zone, segregated from the DMZ and other untrusted networks.

1.3.8 Do not disclose private IP addresses and routing information to unauthorised parties. Note: Methods to obscure IP addressing may include, but are not limited to:

Network Address Translation (NAT),
Placing servers containing cardholder data behind proxy servers/firewalls or content caches,

Removal or filtering of route advertisements for private networks that employ registered addressing,

Want to know more about gateway?

How BlueFinch-ESBD can help you to create your MFT experience?

Have a 15 minutes chat with our MFT expert. Quick and easy on 1 click! 😁

GoAnywhere MFT: regulations and certifications

Éloïse Gruber — Thu, 09 Jul 2026 14:53:14 +0000

The GoAnywhere Managed File Transfer solution has several recognised certifications attesting to the software’s compliance with numerous controls, standards and regulations.

GoAnywhere MFT software is regularly tested for interoperability with the most popular enterprise operating systems and web browsers.

AS2 and AS4 Drummond Certified

AS2 remains one of the most widely adopted messaging standards in the world. Retailers, goods manufacturers, insurance companies, financial services, industry and government agencies have adopted AS2 to protect critical business information worth billions of dollars each year.

Drummond certified products demonstrate to potential partners, customers and competitors that AS2, AS4 or ebXML solutions are compliant with industry standards and interoperable with other certified software solutions. Drummond’s certification program for AS2, AS4 and ebMS has been testing and certifying software solutions for over 20 years.

Type 2 SOC 2 Assessment

SOC (System and Organization Controls – formerly Service Organization Controls) audits provide an independent assessment of the risks associated with the use of service organizations and other third parties.

They are essential to regulatory oversight, supplier management programmes, internal governance and risk management.

A Service Organization Control (SOC 2) audit report provides detailed information and assurance on a service organization’s security, availability, processing integrity and confidentiality controls, based on its compliance with the American Institute of Certified Public Accountants (AICPA) Trust Services Criteria (TSC).

SOC 2 audits are an important part of regulatory oversight, vendor management programmes, internal governance and risk management.

Microsoft Azure

Azure Marketplace is an online shop offering applications and services designed to integrate with Microsoft Azure. By obtaining a listing on the Marketplace, Microsoft has recognised that GoAnywhere MFT software is certified and optimised to run on Azure.

The Microsoft Azure Cloud Platform allows users to run Windows or Linux on virtual machines in the Cloud. Azure users can also use Windows SQL Server. GoAnywhere’s Azure FTPS server solution can help you ensure that your data is safe from vulnerabilities.

Common Criteria

The National Information Assurance Partnership (NIAP) is responsible for implementing Common Criteria in the United States, including managing NIAP’s validation body, the Common Criteria Evaluation and Validation Scheme (CCEVS). NIAP is managing a national programme to develop protection profiles, evaluation methodologies and policies that will ensure that requirements are achievable, repeatable and testable. In partnership with NIST, NIAP also approves Common Criteria testing laboratories to conduct these security assessments in private sector operations across the United States.

The Common Criteria for Information Technology Security (CC) are the technical basis of an international agreement, the Common Criteria Recognition Arrangement (CCRA), which guarantees that :

– Products can be assessed by accredited, competent and independent laboratories to determine whether they meet particular safety properties to a certain extent or with a certain level of assurance.

– Supporting documents are used as part of the common criteria certification process to define how the criteria and evaluation methods are applied when certifying specific technologies.

– Certification of the security properties of an evaluated product can be issued by a number of Certificate Authorizing Schemes, based on the result of their evaluation.

– These certificates are recognised by all ARCC signatories.

In addition to these certifications, GoAnywhere has a number of partnerships with IBM, Oracle, AWS, Docker Hub, Red Ha, Open PGP Alliance, RSA, Microsoft, etc., and complies with many global standards and regulations. The software therefore meets government requirements in terms of security and data protection.

Here are three examples of well-known European laws and standards.

PCI DSS

PCI DSS standards and resources help protect the people, processes and technologies in the payments ecosystem to secure payments worldwide by :

Managing global payment security standards

Validating and listing products and solutions that meet the standards and requirements of the PCI SSC programme

Training, testing and qualifying security professionals and organisations

Providing free resources on best practice and payment security

Our publisher and partner Fortra participates in the Payment Card Industry Security Standards Council (PCI SSC). As a member, Fortra provides training and reviews of new and existing standards.

PCI DSS is the Payment Card Industry’s Data Security Standard, created to strengthen controls over sensitive cardholder data and reduce fraud. It applies to any organisation that processes credit or debit cards. Although compliance with the PCI DSS has been shown to protect companies against data breaches, there is no guarantee that it will be implemented.

Here are some PCI-compliant file transfer requirements:

The PCI DSS standard currently includes 12 main requirements and over 200 sub-requirements. The main concerns of the standard are as follows:

Encryption of data in transit and at rest

Controlling access to cardholder data

Maintaining secure systems and networks.

The General Data Protection Regulation

The GDPR is a regulation designed to strengthen the protection of personal data within the European Union.

All public and private companies operating in Europe or holding personal data on individuals or companies in the EU are affected.

This is where the MFT comes in. It enables :

Secure the transmission of personal data through encryption

Perform integrity checks on successful file transfers to protect data accuracy

Demonstrate GDPR compliance with detailed audit trails and reports on each file transfer

ISO 27001

“This standard, the world’s best-known for information security management, helps organisations secure their information assets, which is vital in an increasingly digitised world.

To meet these cybersecurity challenges, organisations need to strengthen their resilience and implement efforts to mitigate cyberthreats. ISO/IEC 27001 is useful at a number of levels, including to:

Securing information in all its forms, including paper, cloud-hosted and digital data

Increasing resistance to cyberattacks

Providing a centrally managed framework that secures all information in one place

Provide enterprise-wide protection, particularly against technology risks and other threats

Respond to evolving security threats

Reduce costs and expenditure on ineffective defence technologies

Protect data integrity, confidentiality and availability”.

Do you have specific requirements or risks to consider ? Find out how GoAnywhere can help you with your compliance efforts.

HIPAA 
CIS 
FISMA & NIST (800-53r4, CSF, PS 800-37r2 RMF) 
ISO 27001 & 27002 
SOC 2 
SOX 
Australia’s CDR 
Canadian Consumer Privacy Protection Act 
California Consumer Privacy Act 
PIPEDA 
Singapore’s PDPA