Uncategorized – BlueFinch-ESBD

Våra IT-tjänster

Éloïse Gruber — Thu, 13 Aug 2026 09:08:01 +0000

BlueFinch-ESBD Services Offer

With a growing number of systems and partners to integrate and a multiplicity of protocols, the time required to maintain your Managed File Transfer (MFT) system can sometimes overwhelm internal teams.

To remedy this situation, BlueFinch-ESBD offers a managed services solution that allows you to save time, save money, and entrust your MFT systems to experienced technicians who specialise in the field.

Our team works with MFT daily and is in constant contact with the solution development teams. This experience enables us to design a solution tailored to your company.

Delegate the management of your MFT to us for greater peace of mind, security, and traceability!

By entrusting the management of your MFT needs to our team of experts, you free up time for your IT team, allowing them to focus on other projects or tasks.

Our team, composed of vendor-certified experts, possesses in-depth expertise in the technology, industry best practices, and extensive knowledge of evolving MFT platforms.

We constantly stay at the forefront of innovation by monitoring solution updates, new features, and ways to improve the product.

We supervise your MFT solution, upgrade it, and maintain it as needed to keep you up to date and ensure the best possible protection for your files.

The service adapts perfectly to companies of all sizes, scaling up or down according to the evolution and flexibility of your needs.

Finally, our team based in France and the Netherlands enables us to offer unmatched support levels and maintain excellent response times.

Experts always give good advice!

The Various BlueFinch-ESBD Services

Updates

Your MFT is not up to date? Don’t panic!

Our specialists are here to support you in installing the latest software version and verifying that all new features are correctly configured.

After backup advice and executing the update, we ensure that the new configuration is identical to the previous one and check your file transfer services and automated workflows to ensure everything works perfectly.

BlueFinch-ESBD expert consultants are frequently called upon by our clients for this type of mission.

You are thus guaranteed that the version upgrade will be fast and secure and that your MFT will get a fresh new look in no time!

Audit

How to ensure your MFT always matches your usage?

Indeed, the solution installed a few months or even years ago has likely not kept pace with your organisation’s evolution, so a quick check-up is in order!

Also, analyse the security and reliability of your product configuration by requesting a health check.

This service provides a detailed review of your current configuration and settings. We will check the number of licences, available workspace, and task logs while guiding you through the adjustment of each component.

An analysis of your file transfer volumes and a review of use cases will also be conducted.

At the end of the health check, we provide an audit report on the system and a list of recommendations to optimise the use of the solution.

You thus have the certainty that your MFT matches your needs and that your file transfers are optimised and in perfect health!

Migration

Your operating system is obsolete? Moving data centres? Migrating to the Cloud?

An MFT server migration involves transferring the entire MFT installation from a source server to a destination server and must be carefully planned and executed to minimise disruption and ensure business continuity.

Our consultants are at your disposal to guide you through this migration and ensure it is carried out safely and efficiently, without data loss.

Our experts will install your managed file transfer solution on its new host, migrate the configuration, data, and licences, and recreate an identical solution ready for end-user access.

Partner integration & management

Creating new partners can help improve the security, efficiency, and flexibility of your file transfer operations and can be important for several reasons:

Expand the partner network: The more partners you have, the more options you have to securely transfer files and data. Creating new partners allows you to expand your network and have additional options.

Reduce risks: If you work with a limited number of partners, you may be vulnerable to service interruptions if one of those partners experiences availability or security issues. By creating new partners, you can spread the risk and avoid putting all your eggs in one basket.

Improve efficiency: With more partners, you can often improve the efficiency of your file transfer operations by using more direct transfer paths or distributing the load among different partners.

Adapt to change: Partners change often. Being able to add new ones quickly to adapt to these changes or update existing partners can be important.

Thanks to their expertise in the field, our MFT specialists are here to help you with this process or do it for you.

Training

Develop your MFT skills and ensure business continuity through your knowledge

It is essential to maintain the knowledge level of the teams using your MFT solution, strengthen their skills, or train new employees to secure file transfers and thereby avoid data breach risks.

To help you in this endeavour, BlueFinch-ESBD has developed a comprehensive training programme that can be adapted to your needs, your company’s usage, or your team’s knowledge level.

As experts specialised in this technology, we are best positioned to help you ensure that your staff is fully trained on your chosen Managed File Transfer (MFT) tool, capable of both using the software and providing support.

Thanks to our training catalogue, we offer remote or on-site courses tailored to your needs.

Knowledge of security technologies such as encryption, integrity verification, and security certificates will hold no secrets for your team.

Your staff will master MFT solution features such as transfer scheduling, transfer status management, error notification, and security monitoring.

Creation and Management of Flows

Do you need to automate processes from your MFT and lack the time or know-how?

Whether for regular file transfers between remote servers, automating payment processing workflows, invoicing, or employee payroll, the possibilities are numerous!

Automatically sending files via secure email, notifying users when files are successfully downloaded or transferred, or automatically creating database backups at regular intervals and sending them to a secure location will no longer be obstacles.

For many years, our consultants have created thousands of flows for our clients. Entrust this task to our experts!

The Advantages of Managed Services

Free up your IT teams: Allow your team to focus on internal support and projects that enhance your business, while we take care of your specialized secure file transfer (MFT) needs.

Stay in tune with innovation: Our MFT experts continuously monitor new solution versions and features, helping your organization move forward.

Scales with you: The service adapts to all types of businesses and can be scaled down or up based on your needs.

Managed by industry-leading experts: Our team consists of vendor-certified CFTP* experts who possess in-depth knowledge of the technology, industry best practices, and hands-on experience with evolving MFT platforms.

Stay up to date: We will monitor your MFT solution, upgrade it, and maintain it as needed to keep you ahead of the curve and guarantee the best possible protection for your files.

Need additional information ?

You can also take a 15-min appointment directly on our experts’ agenda.

Schedule online

The Royal Danish Library automates the collection of digital cultural heritage with Managed File Transfer

Éloïse Gruber — Fri, 10 Jul 2026 09:46:53 +0000

Swedish brewery Spendrups saves valuable time working with GoAnywhere Managed File Transfer software

Éloïse Gruber — Fri, 10 Jul 2026 09:42:40 +0000

The different types of file transfer protocols

Éloïse Gruber — Fri, 10 Jul 2026 09:41:25 +0000

Before implementing a secure file transfer solution, it is good to know the basics of protocols that are involved in the secure transmission of data.

FTP

The FTP file transfer protocol is a popular transfer method that has been around for decades. FTP exchanges data using two separate channels: the command channel to authenticate the user and the data channel to transfer files.

However, these two FTP channels are not encrypted, which implies that the data sent has a risk of being exploited even if it requires a username and password to authenticate access.

FTPS

Short for FTP, FTPS is a secure file transfer protocol that allows you to transfer files securely through SSL/TLS (Secure Sockets Layer/ Transport Layer Security). FTPS transfers can be authenticated by support methods, such as customer certificates, server certificates and passwords.

SFTP

SFTP stands for FTP part SSH (Secure Shell). This is a secure FTP protocol that is an excellent alternative to unsecured FTP tools or manual scripts. SFTP allows data to be exchanged via an SSH connection that provides a high level of protection for file sharing between systems, cloud, collaborators, etc.

TFTP

Like FTPS and SFTP, TFTP is based on the FTP protocol. TFTP (Trivial File Transfer Protocol) is a simple transfer protocol that allows you to send and receive files. TFTP is used when the reliability of the file is known and no security is required when sending or receiving the file because authentication and encryption of the data are not possible. Anyone who knows the path can download the files. This is not the most secure transfer solution.

SCP

SCP, or Secure Copy Protocol, is an older network protocol that supports file transfers between network hosts. It is somewhat similar to FTP, however SCP supports encryption and authentication functions.

HTTP AND HTTPS

The cornerstone of the World Wide Web, HTTP (Hyper Text Transfer Protocol) is the backbone of data communication. It defines the format of messages by which browsers and web servers communicate and determines how a browser should respond to a query.

HTTP uses TCP (Transmission Control Protocol) as a secondary protocol, which is also a stateless protocol. This means that each command is executed independently and no session information is retained by the recipient.

HTTPS (Hyper Text Transfer Protocol Secure) is the secure version of HTTP where communications are encrypted by TLS or SSL.

AS2, AS3, AND AS4

AS2, AS3 and AS4 are all protocols used to send and secure sensitive file transfers.

AS2 is used to reliably transmit confidential data over the Internet. AS2 uses digital certificates and encryption standards to protect information as it transits between systems and networks. AS2 messages can be compressed, signed, encrypted and sent via a secure SSL tunnel.

AS3 is a standard that can be used to transmit virtually any type of file. AS3 provides an additional level of security when transmitting data through digital signatures and data encryption. It was originally created to transfer XML and EDI data files. Unlike AS2, which is a defined transfer protocol, AS3 is a message standard and focuses on how a message should be formatted when transmitting from server to server. Once an AS3 message has been dialled, it can be transmitted via any other protocol (FTP, SFTP, HTTPS, etc.) provided both parties can access where the message was placed.

AS4 allows companies to exchange data securely. It builds on the foundation established by AS2, but works with web services and provides delivery notifications. As a business-to-business standard, AS4 helps make document exchange safe and simple on the internet.

PESIT

PeSIT is the abbreviation for the “Exchange Protocol for an Interbank Telecompensation System.” PeSIT is a file transfer protocol that was developed by the French Interbank Interbank Systems (GSIT) Economic Interest Group. It is mainly used to meet European banking standards and to transfer communications between banks in Europe.

AS2, AS3, AS4 file transfer protocols

Éloïse Gruber — Fri, 10 Jul 2026 09:39:24 +0000

AS2, AS3, AS4 : What are the differences between these protocols?

If you think these three protocols are simply sequential updates from the 1990s’ AS1 protocol you’d be mistaken. Each protocol brings its own distinct features to the data transmission table. Here’s a few key differences between them.

The specifications of AS2

AS2 (Applicability Statement 2) is a protocol specification used to transmit sensitive data securely and reliably over the internet. AS2 supports the encryption of messages between trading partners and vendors via HTTPS. Data is protected with digital certificates and encryption standards while in transit across systems, networks, and locations.

Organizations often choose AS2 over other file transfer protocols (like FTP or SFTP) because of how easily the protocol helps them meet regulatory compliance requirements and trading partner needs. AS2 serves as a standard used to transfer EDI or other data. Advantages include :

End-to-end encryption
Ability to send/retrieve file transfers of any size or volume
Digital signature authentication for senders and receivers
MDN (Message Disposition Notification) alerts to verify messages were successfully received and decrypted
Validation of file integrity with confirmation of successful transfers

What about AS3 features ?

With the AS3 specification, applications communicate EDI data or other information using the FTP protocol. It’s not, however, just the latest and greatest edition of AS2. Rather, AS3 provides a layer of security for data transmission through digital signatures and data encryption.

This specification offers flexibility, security and non-repudiation receipt (NPR), which gives the sender legal proof of unaltered delivery and verification that the message received is identical to what was sent. Other benefits include:

End-to-end data encryption
SSL encryption and hashing
Confirmation of receipts or MDNs
Proof of transaction details
Large file transfer capabilities
Ability to send any data type

Finally, characteristics of AS4!

AS4, the latest option superseding AS2, is an open business-to-business (B2B) standard for securing and exchanging documents between businesses using web services.

AS4 is frequently used for EDI integration projects. Other advantages include:

Used for both client and server (push and pull actions)
Receipts delivered as SOAP (Simple Object Access Protocol) messages with XML digital signatures
Payload agnostic
Combines MIME and SOAP for message packaging (AS2 is purely MIME-based)
Security based on WS-Security standard vs.AS2’s S/MIME specifications

Managed File Transfer Supports AS4, AS3 and AS2 File Exchanges

GoAnywhere MFT is a secure managed file transfer solution that simplifies, streamlines, audits, and automates file transfers across a variety of environments. It provides support for exchanging files via AS4 as well as AS3 and AS2. Using MFT with AS4/3/2 consolidates the whole transfer process and allows for single pane of glass administration as well as auditing capabilities.

Secure File Transfer at Lightspeed

Éloïse Gruber — Fri, 10 Jul 2026 09:30:55 +0000

What is ”Fast File Transfer”?

Many organizations still use FTP (File Transfer Protocol) to move large files. Slow and vulnerable to poor network conditions, FTP is legacy technology. International file transfers are especially problematic, frequently disconnecting and almost never reaching full line speed. Predictability and “guaranteed file delivery” are virtually impossible with FTP. FTP exchanges data over TCP/IP (or Transmission Control Protocol and Internet Protocol). This protocol makes accelerating file transfers with FTP difficult if not impossible. From timeouts to latency, TCP presents issues another protocol, UDP, does not.

Let’s take a closer look.

UDP protocol

UDP-based Data Transfer Protocol (UDT) is a high-performance data transfer protocol designed for transferring large volumetric datasets over high-speed wide area networks. Such settings are typically disadvantageous for the more common TCP protocol.

Because file transfers over TCP take so long even with higher bandwidth, UDP has become the standard for accelerated file transfer.

FTP and other TCP-based file transfer systems rely on a guarantee that all sent data is successfully received and in the right order. Over long distances or unreliable connections, these built-in confirmations force TCP to send data slower than the network actually allows. Since UDP doesn’t need such guarantees, file transfer applications can optimize network traffic and avoid potential slowdowns.

Introducing FileCatalyst

FileCatalyst is a robust accelerated file transfer software solution that supports client/server architecture, enabling the fast transfer of large files. FileCatalyst solutions are designed specifically to allow the transfer of large files over remote networks experiencing high latency or packet loss.

FileCatalyst provides FTP alternatives that permits to send files of any size or format at full line speed, hundreds of times faster than FTP, while ensuring secure and reliable delivery.

Each FileCatalyst product serves a unique set of organizational file transfer needs and works across a variety of industries.

On its own, FileCatalyst Direct uses the FileCatalyst Server and a full suite of client options for point-to-point transfers. Combining FileCatalyst Direct with FileCatalyst Workflow provides a complete managed and accelerated web-based solution.

Adding FileCatalyst Central allows you to monitor your organization’s entire FileCatalyst deployment by offering a consolidated web-based view of file transfers on your network.

File Exchanges Simplified with File Catalyst Workflow

FileCatalyst Workflow is a web portal for all your file transfer needs. It simplifies file exchange and boosts productivity by streamlining submission, distribution, and file sharing workflows on the web. Users may submit files to your organization for processing, with full tracking at every stage, or they may securely distribute files to anyone with an email address. Additionally, file areas allow users to store files in your organization’s private cloud for collaboration, with online access from anywhere.

FileCatalyst Workflow creates a web portal for uploading files and collects any information (metadata) needed to process those files (for example, processing instructions or quantity of goods ordered). Files and metadata combined are called a“job”. Jobs may go through any number of phases while being tracked through the system until finally reaching the completed state FileCatalyst Workflow solves the problems of file transfer size and speed by acting as a middleman for the file transfer process. Files are sent to the FileCatalyst Server using acceleration technology. Recipients then receive an email containing a download link. All phases of the file transfer are tracked and managed.

With FileCatalyst Workflow as the central storage location for one or more web folders, users have remote access to shared or personal files from anywhere in the world. Both upload and download are supported, and sharing can be at individual account or group levels. Group folders with individual read/ write permissions can be assigned to any number of users.

Central file transfer management

FileCatalyst Central is a web-based monitoring tool that acts as a united gateway to your entire FileCatalyst deployment. FileCatalyst Central allows you to view ongoing transfers in real-time, drill into transaction histories and reports, view alarms, remotely configure nodes, and initiate file transfers. From a single map view you can inspect connected nodes and remotely control them. FileCatalyst Central provides visibility to all FileCatalyst client applications and server nodes in a single centralized location. Adding additional nodes is easy; no additional network configuration is required for new nodes.

With the solution, you can set a wide variety of alarms for file transfer events, including successful, failed or canceled transfers. Alarms can be configured as SNMP traps or email notifications and can be viewed within FileCatalyst Central.

Moreover, reports are shown in near real-time. The reporting engine handles current and archived transfers with high efficiency. Reports are compiled based on individual nodes, groups of nodes, or sessions. This gives administrators instant insight into critical file transfers and the ability to quickly measure traffic and identify usage patterns.

High-speed file transfers to the cloud

FileCatalyst provides the fastest, most reliable, and most feature rich high-speed file transfer solution for moving data to and from the cloud. FileCatalyst takes cloud migration to the next level with features including automation, native cloud storage integration, and an extensive SDK for integrating accelerated transfers into your own applications. With support for major cloud providers and modern licensing options, FileCatalyst is your best choice for fast file transfers to and from the cloud:

Data migration: FileCatalyst has marketplace listings on AWS, MicrosoftAzure, and Google Cloud FileCatalyst can be used on any other cloud compute platform using the Bring Your Own License (BYOL) model.

Cloud Storage integration: FileCatalyst integrates natively with the most popular public cloud storage providers with speeds up to 5Gbps. AWS S3, Azure Blob, Google Cloud Storage, Dropbox, Wasabi, and Backblaze B2 are all supported. Files are streamed through FileCatalyst without landing on local storage and are transferred at the maximum speed the cloud storage provides.

Multi-cloud acceleration: FileCatalyst alleviates the stress of migrating data into public cloud-based object storage, and exponentially shortens transfer times with its patented file transfer acceleration technology.

Fast File Transfer and Microsoft Azure

Moving data into cloud storage presents challenges for organizations across all industries, and finding a tool that can move data to the cloud as fast as possible is one of the challenges. This is because of a barrier in place stopping users from utilizing the high bandwidth available to them. That barrier is the traditional FTP and HTTP-based solutions used to transfer files across the WAN. Furthermore, these solutions cache files locally and copy them into the cloud as a background process, creating the illusion of speed.

FileCatalyst has the ability to accelerate transfers into Azure Blob storage at multi- gigabit speeds. FileCatalyst Direct writes data directly to Azure Blob storage, allowing the data to be streamed directly without caching. With FileCatalyst, file transfer acceleration is achievable regardless of size, file format, or transfer distance.

Is FileCatalyst a good fit for your organisation?

Make no mistake, FileCatalyst is an incredibly powerful file transfer solution,

designed to accelerate and manage file transfers securely and reliably. FileCatalyst is immune to the effects that latency and packet loss have on traditional file transfer methods including FTP, HTTP or CIFS. Global organizations use FileCatalyst to solve issues related to file transfers including content distribution, file sharing, and offsite backups.

Ask for a demonstration by our expert.

The DMZ ‘s role in secure data transfers

Éloïse Gruber — Fri, 10 Jul 2026 09:29:28 +0000

Files can be safely shared with trading partners, users, clients, and vendors while avoiding having critical documents or files stored, even temporarily, in your DMZ.

But what is this DMZ and what is it used for?

That’s what we’re going to find out in this article.

What is the DMZ and how it works?

The DMZ is the neutral network that resides between the Internet and your organisation’s private network. It’s protected with a front-end firewall that limits Internet traffic to certain systems within its zone. On the back end, an additional firewall resides to prevent unauthorised access from the DMZ into the private network.

The DMZ essentially serves as a staging area between an organisation’s private network and the Internet.

In order to share a document with a trading partner accurately, an internal program or employee would need to first copy the desired file from their private network onto a server in the DMZ. The partner could then download the file from that server using an approved protocol, such as FTP/FTPS, SFTP, or HTTP/HTTPS.

When trading partners need to share documents with an organisation, they would upload the files to a server in the DMZ. Subsequently, an internal program or employee would then scan for the files on the server and pull them into their private network.

How can the DMZ be dangerous and impact security?

Although many organisations exchange files using the DMZ, staging files in a vulnerable location like the very publicly accessible DMZ makes them susceptible to a variety of dangerous attacks from enemy territory.

The DMZ can have a major impact on security if not protected properly. In the event that a hacker gains entry to a file server in the DMZ, they may be able to access and download sensitive data and trading partner files that were placed there. Even encrypted files can be at risk to high-grade attackers if keys or passwords are compromised. There’s also a strong likelihood that any user credentials, certificates, or whatever else is needed for authentication could be maintained in the DMZ, increasing vulnerability.

Also at risk is the file sharing software itself, particularly if it can be accessed from within the DMZ. For instance, let’s say a malicious attacker gains access to your territory by creating a “back door” user account into an SFTP server through its admin console. This user account could seemingly appear as “legitimate” and allow the hacker the opportunity to steal sensitive data files. Audit logs could also be manipulated if they’re stored in the DMZ, allowing the attacker to erase any trail they were ever there.

Secure your DMZ with GoAnywhere Gateway

GoAnywhere Gateway is an enhanced reverse and forward proxy that provides organisations with an additional layer of security for exchanging sensitive data with trading partners.

With Gateway, file sharing services can be kept safely inside your private network, without exposing sensitive data to your DMZ (Demilitarised Zone), and connections can be made to external systems on behalf of users in the private network.

With a DMZ secure gateway, like GoAnywhere Gateway, security concerns are solved by allowing an organisation to move file sharing and other public services from the DMZ into the private network without having to open any inbound ports. This approach keeps data files safe in the private network since they no longer need to be staged in the DMZ. It also helps support compliance with PCI DSS, HIPAA, HITECH, SOX, GLBA, and state privacy laws due to the lack of inbound ports needing to be opened into your private network.

GoAnywhere Gateway also supports FTP, FTPS, SFTP, SCP, HTTP, HTTPS, and AS2 file transfer protocols. With Gateway, file sharing services can be kept safe and secure inside your private network, without exposing data to your DMZ.

Reverse and Forward proxy

The reverse proxy handles inbound requests from trading partners, while the forward proxy takes care of outbound file transfer requests from internal employees and systems. Below more technical details!

Reverse Proxy

A reverse proxy is an intermediate connection point that serves as a gateway between users and your origin server. This type of proxy server retrieves files or other resources on behalf of a client. In the case of GoAnywhere Gateway’s reverse proxy, when an external client (trading partner) connects to a listener on GoAnywhere Gateway in the DMZ, GoAnywhere Gateway will make a request over the control channel to GoAnywhere MFT in the private/internal network. GoAnywhere MFT will then create a new outbound data channel to GoAnywhere Gateway. This data channel will be attached to the desired service (e.g. FTP, FTPS, SFTP, HTTP/s) and all traffic for that session will be routed over this new data channel including client authentication requests, data and commands. When the session is terminated, the corresponding data channel will be removed.

Forward Proxy

Similar to a reverse proxy, a forward proxy also serves as an intermediary between clients and servers; however, forward proxies filter connections going out (where reverse proxies filter connections coming in) from the internet to your servers.

The Forward Proxy in GoAnywhere Gateway allows you to route client requests from GoAnywhere MFT (in the private/internal network) to external FTP, FTPS, SFTP and SCP servers without revealing the identity or locations of your internal systems. The Forward Proxy is additionally used by GoAnywhere MFT to route active and passive FTP and FTPS data connections through GoAnywhere Gateway.

When a process in GoAnywhere MFT needs to make an outbound connection through the proxy, a request is made to GoAnywhere Gateway with the address of the intended destination. GoAnywhere Gateway will then establish the connection to that destination and will bridge it to the requesting system.

Migration XFB Gateway for a PeSIT use

Discover how our super experts proceeded for this customer solution replacement.

PCI DSS about DMZ requirements

GoAnywhere Gateway is an important security component for protecting cardholder data and helping organisations to comply with PCI DSS. By allowing organisations to keep sensitive files and credentials out of the DMZ (demilitarised zone) while not requiring inbound ports to be opened into the internal network, GoAnywhere Gateway is specifically useful for meeting the requirements of PCI DSS:

1.3 Prohibit direct public access between the Internet and any system component in the cardholder data environment.

1.3.1Implement a DMZ to limit inbound traffic to only system components that provide authorized publicly accessible services, protocols, and ports.

1.3.2 Limit inbound Internet traffic to IP addresses within the DMZ.

1.3.3 Do not allow any direct connections inbound or outbound for traffic between the Internet and the cardholder data environment.

1.3.4 Implement anti-spoofing measures to detect and block forged source IP addresses from entering the network.

1.3.5 Do not allow unauthorized outbound traffic from the cardholder data environment to the Internet.

1.3.6 Implement stateful inspection, also known as dynamic packet filtering. (That is, only ”established” connections are allowed into the network.)

1.3.7 Place system components that store cardholder data (such as a database) in an internal network zone, segregated from the DMZ and other untrusted networks.

1.3.8 Do not disclose private IP addresses and routing information to unauthorised parties. Note: Methods to obscure IP addressing may include, but are not limited to:

Network Address Translation (NAT),
Placing servers containing cardholder data behind proxy servers/firewalls or content caches,

Removal or filtering of route advertisements for private networks that employ registered addressing,

Want to know more about gateway?

How BlueFinch-ESBD can help you to create your MFT experience?

Have a 15 minutes chat with our MFT expert. Quick and easy on 1 click! 😁

GoAnywhere MFT: regulations and certifications

Éloïse Gruber — Thu, 09 Jul 2026 14:51:52 +0000

The GoAnywhere Managed File Transfer solution has several recognised certifications attesting to the software’s compliance with numerous controls, standards and regulations.

GoAnywhere MFT software is regularly tested for interoperability with the most popular enterprise operating systems and web browsers.

AS2 and AS4 Drummond Certified

AS2 remains one of the most widely adopted messaging standards in the world. Retailers, goods manufacturers, insurance companies, financial services, industry and government agencies have adopted AS2 to protect critical business information worth billions of dollars each year.

Drummond certified products demonstrate to potential partners, customers and competitors that AS2, AS4 or ebXML solutions are compliant with industry standards and interoperable with other certified software solutions. Drummond’s certification program for AS2, AS4 and ebMS has been testing and certifying software solutions for over 20 years.

Type 2 SOC 2 Assessment

SOC (System and Organization Controls – formerly Service Organization Controls) audits provide an independent assessment of the risks associated with the use of service organizations and other third parties.

They are essential to regulatory oversight, supplier management programmes, internal governance and risk management.

A Service Organization Control (SOC 2) audit report provides detailed information and assurance on a service organization’s security, availability, processing integrity and confidentiality controls, based on its compliance with the American Institute of Certified Public Accountants (AICPA) Trust Services Criteria (TSC).

SOC 2 audits are an important part of regulatory oversight, vendor management programmes, internal governance and risk management.

Microsoft Azure

Azure Marketplace is an online shop offering applications and services designed to integrate with Microsoft Azure. By obtaining a listing on the Marketplace, Microsoft has recognised that GoAnywhere MFT software is certified and optimised to run on Azure.

The Microsoft Azure Cloud Platform allows users to run Windows or Linux on virtual machines in the Cloud. Azure users can also use Windows SQL Server. GoAnywhere’s Azure FTPS server solution can help you ensure that your data is safe from vulnerabilities.

Common Criteria

The National Information Assurance Partnership (NIAP) is responsible for implementing Common Criteria in the United States, including managing NIAP’s validation body, the Common Criteria Evaluation and Validation Scheme (CCEVS). NIAP is managing a national programme to develop protection profiles, evaluation methodologies and policies that will ensure that requirements are achievable, repeatable and testable. In partnership with NIST, NIAP also approves Common Criteria testing laboratories to conduct these security assessments in private sector operations across the United States.

The Common Criteria for Information Technology Security (CC) are the technical basis of an international agreement, the Common Criteria Recognition Arrangement (CCRA), which guarantees that :

– Products can be assessed by accredited, competent and independent laboratories to determine whether they meet particular safety properties to a certain extent or with a certain level of assurance.

– Supporting documents are used as part of the common criteria certification process to define how the criteria and evaluation methods are applied when certifying specific technologies.

– Certification of the security properties of an evaluated product can be issued by a number of Certificate Authorizing Schemes, based on the result of their evaluation.

– These certificates are recognised by all ARCC signatories.

In addition to these certifications, GoAnywhere has a number of partnerships with IBM, Oracle, AWS, Docker Hub, Red Ha, Open PGP Alliance, RSA, Microsoft, etc., and complies with many global standards and regulations. The software therefore meets government requirements in terms of security and data protection.

Here are three examples of well-known European laws and standards.

PCI DSS

PCI DSS standards and resources help protect the people, processes and technologies in the payments ecosystem to secure payments worldwide by :

Managing global payment security standards

Validating and listing products and solutions that meet the standards and requirements of the PCI SSC programme

Training, testing and qualifying security professionals and organisations

Providing free resources on best practice and payment security

Our publisher and partner Fortra participates in the Payment Card Industry Security Standards Council (PCI SSC). As a member, Fortra provides training and reviews of new and existing standards.

PCI DSS is the Payment Card Industry’s Data Security Standard, created to strengthen controls over sensitive cardholder data and reduce fraud. It applies to any organisation that processes credit or debit cards. Although compliance with the PCI DSS has been shown to protect companies against data breaches, there is no guarantee that it will be implemented.

Here are some PCI-compliant file transfer requirements:

The PCI DSS standard currently includes 12 main requirements and over 200 sub-requirements. The main concerns of the standard are as follows:

Encryption of data in transit and at rest

Controlling access to cardholder data

Maintaining secure systems and networks.

The General Data Protection Regulation

The GDPR is a regulation designed to strengthen the protection of personal data within the European Union.

All public and private companies operating in Europe or holding personal data on individuals or companies in the EU are affected.

This is where the MFT comes in. It enables :

Secure the transmission of personal data through encryption

Perform integrity checks on successful file transfers to protect data accuracy

Demonstrate GDPR compliance with detailed audit trails and reports on each file transfer

ISO 27001

”This standard, the world’s best-known for information security management, helps organisations secure their information assets, which is vital in an increasingly digitised world.

To meet these cybersecurity challenges, organisations need to strengthen their resilience and implement efforts to mitigate cyberthreats. ISO/IEC 27001 is useful at a number of levels, including to:

Securing information in all its forms, including paper, cloud-hosted and digital data

Increasing resistance to cyberattacks

Providing a centrally managed framework that secures all information in one place

Provide enterprise-wide protection, particularly against technology risks and other threats

Respond to evolving security threats

Reduce costs and expenditure on ineffective defence technologies

Protect data integrity, confidentiality and availability”.

Do you have specific requirements or risks to consider ? Find out how GoAnywhere can help you with your compliance efforts.

HIPAA 
CIS 
FISMA & NIST (800-53r4, CSF, PS 800-37r2 RMF) 
ISO 27001 & 27002 
SOC 2 
SOX 
Australia’s CDR 
Canadian Consumer Privacy Protection Act 
California Consumer Privacy Act 
PIPEDA 
Singapore’s PDPA

The ICAP protocol

Éloïse Gruber — Thu, 09 Jul 2026 14:49:29 +0000

The Internet Content Adaptation Protocol (ICAP) was formally introduced in December 1999 by the ICAP Forum. ICAP is a lightweight protocol developed in the 2000s and specified in RFC 3507. The objective of the protocol is to provide a generic interface for communicating with content filtering solutions on the Internet.

ICAP defines “a standardised interface between network equipment playing the role of client (proxy server, firewall, security gateways), and service equipment (ICAP servers) whose objective is analysis and adaptation in real-time web feeds.

ICAP is a request/response protocol that is similar in semantics and usage to HTTP. It allows ICAP clients to transmit HTTP messages to ICAP servers for transformation or other processing (”adaptation”). The server runs its transformation service on the messages and returns responses to the client, usually with modified messages. Typically, suitable messages are HTTP requests or HTTP responses.

ICAP is typically used to implement virus scans and content filters in HTTP proxy caches. Content adaptation involves performing the particular value-added service (content manipulation) for the associated customer request/response.

ICAP uses TCP/IP as its transport protocol. The default port is 1344, but other ports can be used. The TCP flow is initiated by the ICAP client to a passively listening ICAP server.

The strengths of ICAP

The ICAP protocol, inspired by the HTTP protocol, from which it uses certain methods, however, is distinguished by several advantages:

A simple transactional mode, consisting of passing several pieces of information through a single transmission medium. This allows the same resource to be shared between several users
Data preview features
Early interruptions of processing in order to limit exchanges between clients and ICAP servers
Managing load distribution and redundancies

ICAP focuses on leveraging edge devices (caching proxies) to help provide value-added services. At the heart of this process is a cache that serves as a proxy for all client transactions and processes them through web servers.

These ICAP servers focus on a specific function, for example ad insertion, virus scanning, multi-AV scanning, content translation, language translation or content filtering. Offloading value-added services from web servers to ICAP servers allows those same web servers to be sized based on raw HTTP throughput without having to manage these additional tasks.

ICAP, the Internet Content Adaptation Protocol, is a protocol aimed at providing a simple object-based content vector for HTTP services.

ICAP and DLP

Data Loss Prevention (DLP) is a set of tools and processes used to ensure that sensitive data is not lost, intentionally misused, or accessed by unauthorized users.

DLP enforces remediation through alerting, encryption, and other protective actions to prevent end users from accidentally or maliciously sharing data that could create risks for the organization.

ICAP and the MFT

MFT (Managed File Transfer) or SFT (secure file transfers), protects “the movements and actions” of files at rest and in transit. Secure file transfers ensure file integrity and movement even if connectivity is interrupted or the files being sent are large.

Secure file transfer solutions encrypt information and create audit trails of transfer activity to provide necessary documentation for compliance requirements such as PCI DSS, GDPR, SOX, HIPAA, NIST and others.

With MFT, you can choose to transfer the files using different secure protocols such as SFTP, FTPS, HTTPS, AS2, AS4, etc.

The ICAP and MFT combination

Any incoming communication can pose a threat to an organization and file exchange is no exception. Files received from third parties may contain malicious code embedded in a harmless document.

DLP enhances the MFT’s ability to control information by applying deep content inspection and adaptive data loss prevention to enforce more comprehensive information security policies to prevent data loss, ensure compliance and prevent malware threats from infecting the organization.

This integration between ICAP and MFT starts with workflows and triggers defined according to your business needs, replaces sensitive text with asterisks, and detects/erases text (even in images) so that activities can continue, without the incriminated content. This integration of data security also helps ensure compliance with sector regulations.

This combination of file transfers and advanced threat protection provides end-to-end security and monitoring, with content inspection and redaction occurring in file transfers through ICAP before the files are even sent or received via MFT.

Use cases

By implementing ICAP, businesses are able to apply deep content inspection, adaptive redaction, and data leak prevention technologies to existing web security architectures.

Editing content

An Internet service provider can use a transparent HTTP proxy and modify web content received by the user via an ICAP server in order to:

To insert advertising within web pages
To detect the presence of malicious content and warn the user by inserting a warning and deleting suspicious content.

Files received by third parties, such as purchase orders, invoices or legal documents, may contain malicious content. ICAP helps neutralize risks such as embedded malware, suspicious scripts, and other high-risk content that enters or exits your organization without disrupting the flow of communication.

Secure your file transfers

Email is the primary vector of incoming threats, but also a source of data leaks.

Protect your organisation from threats and data leaks when sharing files internally or externally.

Prevent accidental sharing of files containing sensitive data and redact sensitive information from file transfers to eliminate data and compliance risks.

With ICAP, you prevent ransomware and other malware from entering your organization and being shared externally.

Source :

https://datatracker.ietf.org/doc/html/rfc3507

https://www.goanywhere.com/products/goanywhere-mft/connectivity/icap

https://web.archive.org/web/20170829065223/http://www.icap-forum.org/documents/specification/icap_whitepaper_v1-01.pdf

Zero Trust model

Éloïse Gruber — Thu, 09 Jul 2026 14:47:42 +0000

The Zero Trust model is becoming increasingly attractive in the face of technological developments calling into question the traditional perimeter defense model. The increased use of the Cloud, the development of teleworking and the use of personal means (BYOD) to access professional data reduce the control that entities (such as administrators) exercise over their information systems and data.

What is Zero Trust and what is its objective ?

The Zero Trust approach is above all an architectural concept dedicated to strengthening security and access to ressources, and not a technology. In a traditional IT perimeter defense logic, users connected from the organization’s network have the right to access large ressources, without the application of basic partitioning measures or authentication and access controls, users are considered ”trusted”.

The Zero Trust approach consists of reducing the ”implicit trust” granted to users and activities carried out through company equipment. However, ”perimeter protections” are not disapearing. There are always firewalls, proxies, etc. Tis model simply assumes that any user could have malicious intentions and that a cyberattack could occur or be already in progress.

Zero trust recommendations

To reduce “implicit trust”, controls must become regular, dynamic and granular.

“Access to resources should be granted on the basis of knowledge of need” and at the lowest possible level of privilege. Access requests must therefore be monitored and reassessed regularly.

Improved identity governance: As a key element of the Zero Trust model, the identity repository(s) must be sanitized with a strict update policy during arrivals, departures, and mobility. They must accurately reflect the current situation of internal and external users within a company.

A more granular and dynamic “compartmentalization” of resources: This micro-segmentation groups resources into groups that have business meaning. These elements make it possible to adapt the protection of resources to the most accurate need for protection, because all resources are classified and partitioned according to their role, their sensitivity, and their exposure to threats.

Authentication mediums: Dual-factor authentication is generally a prerequisite for implementing the Zero Trust model, it is recommended to be careful in the choice of authentication factors and to favor, for example, certificates generated by a management infrastructure of trusted keys.

Strengthening detection: The security logs generated must be judiciously configured and then centralised in a SIEM. Security monitoring teams must be sufficiently trained, experienced and sized to respond to security alerts.

Change management: If the Zero Trust model is seen as a lever for simplifying the user experience, it should not make us forget that users are the first concerned by the digital security of their entity. The new methods of access, authentication or alert must be communicated clearly, recalling the importance of being vigilant. This transformation must be gradual and controlled in order to ensure the protection of the data and assets processed and not weaken the historical information system.

https://www.ssi.gouv.fr/en/

Zero trust and file transfers (MFT): what’s the connection ?

Adopting a Zero Trust approach ultimately reduces your company’s attack surface, but not only that. It also allows better management of compliance, IT certification (such as ISO 27001) and corporate policies. You can also go beyond traditional file encryption to ensure that all documents sent or received (via GoAnywhere MFT for example) are automatically scanned for threats, encrypted and protected before being shared.

As you probably already know, BlueFinch-ESBD provides several IT solutions, some of which include encryption capabilities to securely share data with authorized individuals while protecting it against viruses and malware.

By taking the Zero Trust approach with MFT, you eliminate threats from the file transfer process. When files are sent or received, scan them for viruses and malware and block them if threats are found (Secure ICAP Gateway is the perfect tool for this). You can also inspect files for unwanted metadata or sensitive information to remove before the remaining file contents are shared. You can have better access control to the Cloud as well as better visibility.

Additionally, you determine who can access files by setting predetermined rights and permissions. You can revoke access to files at any time with a perpetual “undo” option to maintain control.

Here is an explanatory video in English to better understand the advantages of Zero Trust with file transfers.

You can have better access control to the Cloud. Zero Trust security policies can be applied to give you more visibility and access control within the Cloud.

Want to know more? Here’s the explanatory brochure.

For futher software information – Technical solutions to know

GoAnywhere MFT

GoAnywhere MFT is an all-in-one secure file transfer (MFT) solution that streamlines file exchange processes while protecting your data. With support for multiple file transfer protocols (AS2, AS3, AS4, PeSIT, SFTP, FTPS, etc.), audit reports to help meet compliance requirements and automation capabilities, This MFT solution will save you time and reduce the risk of human error.

Clearswift and Secure ICAP Gateway

With the need to share information comes the risk of exposing the wrong content and the question of how that data can be shared securely.

Files containing confidential information, whether visible in the file body or hidden in metadata, may be shared in error.

Likewise, sending and receiving files between partners can potentially open the door to malware or threats hidden in file transfers if they are not properly secured and sent securely.

Clearswift is a data loss prevention (DLP) solution, essential for all organizations that deal with sensitive data, especially those operating in highly regulated industries such as defense, finance, government and healthcare.

Want to know more? Take 15 minutes for a quick session with our experts, where you can ask them all your technical and commercial questions.