Feature Availability

The tables below describe which features are included in EFT, and which are available with the licensing of the following modules. Items marked "EFT" are part of EFT without any modules licensed (also known as EFT "core.")

If you are comparing EFT to EFT Arcus (our cloud SAAS managed file transfer solution), refer to the list of features (after the features tables) that are not available in EFT Arcus and a list of EFT Arcus constraints you should consider.

(Right-click within this topic to print a copy.)

Core Features of EFT

These features are part of EFT, but you still need to activate an EFT license after the trial has ended. Use of certain core features will require an additional module (such as HTTP/S, SFTP, or FTPS) or external tools (such as connection to an LDAP or ICAP server). Refer to the feature tables under Features by Category for details.

Active-Active clustering (HA)

Active-passive clustering (Failover for high availability)

Administrative console

Admin roles and permissions

Audit performance counters to Windows Perfmon

Auditing to text file

Auditing internal metrics to local database

Backup and restore wizard

Ban file types by extension

Batch management of users

Built-in, NTLM, AD, and LDAP auth (including AD admin auth)

COM API

Connection Profiles (requires HTTPS, SFTP, or FTPS to connect as the server)

Content Integrity Control (CIC)

Delegated administration

Denial of server and flood protection

Else conditional logic in rules

Encrypted folders (secure data at rest)

Expire inactive accounts (including admin accounts)

Expire passwords after N days (including admin accounts)

Expiration reminder

FIPS 140-2-certified crypto (requires SSL/TLS or SFTP)

FTP plain (FTPS requires FTPS module)

IP white/black listing

Mobile file transfer

Override VFS credentials

Password complexity

Performance counters

REST-based administration

Reusable connection profiles

Run command-line scripts

SSL client cert auth (full functionality available only when HTTPs or FTPs module is registered)

Triggers based on incoming (uploaded) files

Virtual folders mapped to shares

Windows EFS encryption

Event Rule Actions: File scan for DLP/AV, ICAP/CIC Flow: Stop Processing Flow: Variable Protocol: Email System: Backup System: Cleanup User: Action Windows: Event Log

Event Rules: "IF" conditional for triggers Create a change log for rules "Else" conditional for triggers Event Rule import/export Group triggers into folders (Event Rule Folders) Securable objects (Event Rule Permissions) Connection Events (all) File Server Events (all) Server Events (all) Site Events (all) User Events (all)

Features by Category

These acronyms for the modules are used in the tables below:

AAMM = Advanced Authentication Modes Module ARM = Auditing and Reporting Module AS2 = AS2 protocol module AWM = Automate Workflow Module BAM = Business Activity Monitoring CCM = Cloud Connector Module DMZ = DMZ Gateway EAM = Enterprise Actions Module FMM = Folder Monitor Module FTC = File Transfer Client

FTPS = FTPS module HTTPS = HTTPS module PGP = PGP Module RAM = Remote Agent Module RCM = Regulatory Compliance Module SFM = Secure Forms Module SFTP = SFTP module TEM = Timer Event Module WMU = Workspaces

Protocols

Feature	EFT	EFT Arcus
FTP protocol (RFC 959)	Included	Included
FTP extensions (multi-part, resume, parallel threads, file integrity checking, custom commands, S-Key, PASV port range, UTF-8, customizable banner, command blocking, EBCDIC mode, PASV port range controls)	Included	Included
SSL/TLS 1.2 – for secure communications	Included	Included
SSL certificate management	Included	Included
SSL client certificate authentication	Included	Included
SSL control over ciphers, algorithms, and protocols	Included	Included
Real-time session monitoring	Included	Included
SFTP protocol	SFTP	Included
SFTP advanced options (multiple auth methods)	SFTP	Included
SFTP key management	SFTP	Included
SFTP control over ciphers, algorithms, and protocols	SFTP	Included
FIPS 140-2 certified cryptographic module (Requires SFTP or HTTPS to function properly)	Included	Included
HTTPS protocol	HTTPS	Included
HTTPS extensions (various auths including IWA/SSO, configurable headers, compliance with OWASP security guidelines, HSTS support, many other headers,)	HTTPS	Included
Web client – Built-in web client adds a rich set of features compared to script-driven HTTP/S transfers	HTTPS	Included
HTTP to HTTPS auto-redirect	HTTPS	N/A
Customizable HTTP error messages	HTTPS	N/A
Mobile access via native mobile transfer client ) – For iOS and Android	HTTPS	Included
AS2 protocol	AS2 module	Included in Custom and Premier Tiers
AS2 extensions (Message Level Security (MLS), Reliability Profile, Multiple Attachments (MA) profile.	AS2 module	Included in Custom and Premier Tiers

Authentication (Access Controls)

Feature	EFT	EFT Arcus
EFT-managed accounts (i.e., "built-in authentication, or Globalscape authentication)	Included	Included
Active Directory (AD) – native Windows integration, including admin accounts) (In EFT Arcus, "AD impersonation" is available, but not authentication.)	Included	N/A
ODBC - leverage any ODBC data source	Included	N/A
LDAP - authenticate against LDAP sources, including AD	Included	Included
SAML (WebSSO) - including Just In Time (JIT) provisioning	AAMM	Included
RADIUS - often used as a two-factor authentication source	AAMM	Available in the Premium Tier and configured by Support
RSA SecurID® (native and Steel-Belted Radius (SBR))	AAMM	Available in the Premium Tier and configured by Support
CAC - Common Access Card authentication	AAMM	Available in the Premium Tier and configured by Support
Secrets module	CCM	N/A
SMS authentication - two-factor authentication (2FA) for WTC and Workspaces (In EFT Arcus, the "out-of-bad" passcode to pick up files is available. "SMS Config" is coming soon.)	HTTPS	Available in the Premium Tier and configured by Support

Authorization (Resource Controls)

Included Included Included

Feature	EFT	EFT Arcus
AD Impersonation - Active Directory manages permissions	Included	N/A
AD-based administration accounts	Included	N/A
EFT managed folder permissions	Included	Included
Role-based administrator accounts with granular permissions (Delegated administration)	Included	ServerAdmin N/A
Permission groups – templatize sets of permissions	Included	Included
Virtual folders - map virtual to physical folders including network shares	Included	N/A
Home folders - designate a home folder and optionally make it the user's root folder	Included	Included
Set limits - number of logins, connections,  file sizes, transfer speeds, disk quotas	Included	Included
DoS/flood detection algorithms and auto-IP ban logic	Included	Included
IP access rules - full featured IP access rule manager (whitelisting/blacklisting)	Included	Included
Ban file types by extension - prevent upload of unwanted file types	Included	Included
Monitor and kick offending users from the server	Included	Included
Invalid account names - controls to auto-ban offender IP	Included	Included
Invalid passwords -  controls to auto-lockout, disable, or ban IP	Included	Included
Password complexity - configure a number of password complexity options	Included	Included
Password reset - user-initiated or on initial login	Included	Included
Password reuse - disallow historical (previously used) passwords	Included	Included
Expire accounts - disable account on a given date	Included	Included
Expire inactive accounts - disable or remove account after N days of inactivity	Included	Included
Expire passwords - expire passwords after N days	Included	Included
Expiration reminder - email user reminder to change their password	Included	Included
Data sanitization - securely clean deleted data using military grade wiping	RCM	Included
Encrypted folders - EFT built-in, secure-data-at-rest Solution	Included	Included
EFS - encrypt data at rest using Windows' Streaming repository encryption (EFS)	Included	N/A
Override VFS credentials	Included	N/A
OpenPGP - use OpenPGP to encrypt, sign, and decrypt data	OpenPGP	Included
PCI DSS - Site settings to facilitate PCI DSS and other compliance mandates	RCM	Included
DMZ Gateway®- securely proxy transfers through the DMZ	DMZ Gateway®	N/A

Administration

Feature	EFT	EFT Arcus
Silent installation - unattended setup	Included	N/A
Administrator GUI - Windows based Graphical User Interface (GUI)	Included	Included
Remote administration - administrate from other systems in the network	Included	Included
Secure remote administration - SSL encrypted administration communications	Included	Included
Multiple administrators - allow concurrent administration	Included	Included
Secure administration - same password complexity options available for administrators as for users	Included	Included
Flexible authentication - leverage native, NTLM, or AD to authenticate administrators	Included	Only LDAP supported
Forensics - audit and report on all administrator activity and changes	ARM	Included
COM API - programmatic administration	Included	N/A
REST endpoint for querying administrative info and server status	Included	Included
Backup and Restore - one-click backup and easy restore of entire configuration	Included	N/A
Batch account management - perform actions to multiple accounts simultaneously (such as multi-select users to reset their passwords)	Included	Included
Specify personal data and privacy settings on a Site and per user	RCM	Included
Generate GDPR DPIA report	RCM	N/A

Auditing and Visibility

Feature	EFT	EFT Arcus
Logging - flat (text) file log in W3C and other formats	Included	Included
Monitor transfers in real time	ARM	Included
View historical transfers in the administration interface	ARM	Included
Audit Performance counters to Windows Perfmon	Included	N/A
Audit internal metrics to local database	Included	N/A
Audit to SQL - audit transactions to a SQL database	ARM	Included
View reports (predefined)	ARM	Included
Create custom reports	ARM	N/A
Audit to Oracle - audit transactions to an Oracle database	ARM	N/A
Business Activity Monitoring (BAM) - real-time visibility, dashboard, and analytics (Requires ARM)	BAM, ARM	N/A

Automation (Integration with Other Systems)

Feature	EFT	EFT Arcus
Event Rules change log	Included	Included
Group Event Rules into folders	Included	N/A
React to stimuli - trigger workflows based on file uploads and other server events	Included	Included
Send email to users or administrators as part of a workflow	Included	Included
"Stop processing if failed" action	Included	Included
"If" and "Else" Conditions in Event Rules	Included	Included
Connection Events	Included	Included
Import/Export Event Rules	Included	N/A
Context variables - use transaction values inside of workflows	Included	Included
Conditional logic - build fine-grained business logic into workflows	Included	Included
Backup Action - Back up files	Included	Included
Cleanup Action - securely remove old files based on your organization’s data retention policies	Included	Included
Upload and download - push or pull files to remote servers as part of a workflow	FTC	Included
User Account Action - for tasks like re-enabling user accounts and compliance requests (for example, HIPAA, GDPR) in which users might ask that an organization remove all traces of their account.	Included	Included
Windows Event Log Action	Included	Included
Create reusable connection profiles for use in Event Rules	Included	Included
Integration with antivirus and DLP (Data Loss Prevention) tools to permit or prevent transfers based on policies. NOTE: Content Integrity Control is used in event rules to send a file to an external antivirus scanner or data loss prevention solution for processing. Customer must install an antivirus/ data loss prevention solution. Any third-party content inspection product that supports ICAP can communicate with the Content Integrity Control in EFT. EFT Arcus has built-in Windows Defender antivirus protection at the OS level.	Included	Included (Read comments to the left.)
File Server Events	Included	Included
Server Events	Included	Included
Site Events	Included	Included
User Events	Included	Included
Operating System Events	FMM, TEM	Included
Cloud-Based Events	CCM	Included
Workspace Events	WMU, HTTPS	Included
Secure File Send Events	WMU, HTTPS	N/A
AS2 Events	AS2	N/A
Subroutine Event	EAM	N/A
Send pre- and post- commands to mainframe during copy/move actions	FTC	Included
Perform folder and file operations	EAM	Included
Event Rule invoke over WS/SOAP (uses HTTPS port)	EAM, HTTPS	N/A
Web Services - trigger workflows using Web Service calls; Invoke Web Service from URL	CCM	Included
Execute a process, including scripts, as part of a workflow	EAM	N/A
Folder monitor - trigger workflows immediately after files arrive in a monitored folder	FMM	Restricted to Arcus Site root folder share only
Schedule events - trigger workflows on a recurring basis	TEM	Included
Compress/Decompress files	EAM	Included
Advanced workflows - tap into the Advanced Workflow Engine to build sophisticated workflows	AWM	Included
Integration with cloud (AWS and Azure) storage; Copy, move, and download from cloud storage	CCM	Included
Ability to monitor and act upon AWS S3 and Azure blob storage activity	CCM	Included
Centralized control for automating transactions originating from distributed systems (Remote Agents), including provisioning, management and Event Rules	RAM	Included
Run PowerShell scripts in Event Rules	EAM	N/A
Move tabular data between programs using Get/Loop from Host Action, and Import/Export to/from Dataset	EAM	Coming soon

Person-to-Person (P2P) File Transfer

Feature	EFT	EFT Arcus
Ad hoc file transfer – Allow authorized users to share files or folders with guest users via Outlook or using EFT’s web interface, for secure P2P file exchange	HTTP/S, Workspaces	Included
Two-way file sharing - recipients provided with multiple methods to securely send files to each other	HTTP/S, Workspaces	Included
Receipt notification - email notification when files are picked up by the recipient	HTTP/S, Workspaces	Included
Pick-up authentication - recipients can be required to verify their identity before downloading files	HTTP/S, Workspaces	Included
Full file tracking - Users and administrators can view complete history of files sent and received	HTTP/S, Workspaces	Included
Centralized policy controls - administrator can set defaults and mandate policies or let authorized users decide	HTTP/S, Workspaces	Included
Mixed mode authentication - optionally authenticate internal employees against AD, while maintaining guest isolation	HTTP/S, Workspaces	LDAP only
Integration with EFT - monitor all ad hoc file transfer activity from EFT	HTTP/S, Workspaces	Included
Request files – Authorized users can generate a request link that guests follow to securely upload files.	HTTP/S, Workspaces	Included
Drop-off files to internal users with no attachment limits	HTTP/S, Workspaces	Included
Manage personal data and privacy settings for GDPR and other privacy rules in the Workspaces client	HTTP/S, Workspaces, RCM	Included
Multifactor authentication via email or SMS for client logins	HTTP/S, Workspaces	N/A
Gather metadata for uploads in the client via upload forms	HTTP/S, Workspaces, SFM	N/A
View sent and received messages history in client	HTTP/S, Workspaces	Coming soon!

Architecture

Feature	EFT	EFT Arcus
IPv6 - Full dual stack (IPv4/6 mixed) support	Included	Included
Virtual - Install on virtual machines, e.g. VMware and Hyper-V	Included	N/A
Unicode - UTF-8 encoding of filenames and other fields where applicable	Included	Included
IDN - Internationalized domain name support	Included	Included
I/O Completion Ports - Technology that allows for fast performance on Windows systems	Included	Included
Active-passive clustering - Failover for high availability	Included	N/A
Active-active, high availability (HA) clustering with two or more EFT servers	Included	Included

Features NOT Available in EFT Arcus

In addition to items listed above as not available (N/A), below is a summary of the EFT features that are not available in EFT Arcus.

• Accelerate file transfers

• AS2 protocol (Only available in Custom and Premium Tier)

• AWE - Certain Advanced Workflow Engine actions are not available in Arcus

• HTTP to HTTPS auto-redirect

• Customizable HTTP error messages

• Active Directory (AD) authentication and ACLs

• ODBC data source for user authentication

• NTLM authentication (local system accounts)

• RADIUS, RSA SecurID, CAC (Only available in Premium Tier and configured by Support)

• Windows' Streaming repository encryption (EFS)

• DMZ Gateway (securely proxy transfers through the DMZ)

• Silent installation (unattended setup)

• COM API programmatic administration

• Server admin account

• Perform actions to multiple accounts simultaneously (Batch account management)

• Business Activity Monitoring (BAM) (real-time visibility, dashboard, and analytics)

• Active-passive clustering failover for high availability

• Run PowerShell script, Trigger (GoTo) Rule

• Override VFS credentials

• Secrets module

• Custom commands

• Virtual folders (mapped to network shares)

• Batch account management

• One-click backup and restore

• Generate GDPR report

• Multifactor authentication via email (available for Site admin only)

• Use upload forms to gather metadata in Workspaces

• View sent and received message history in Workspaces

EFT Arcus Constraints

The following constraints should be considered when deciding whether to deploy EFT Arcus instead of EFT.

• Each EFT Arcus instance can have up to 3 sites; adding or removing sites can be requested via Support ticket

• Creating, removing, updating, or deleting administrator accounts can only be requested via Support ticket

• The site root path and Site names are fixed

• Windows File Explorer or UNC path via SMB do not provide direct access to the site root

• Clearswift Secure ICAP Gateway for EFT is not currently available in EFT Arcus