FTP protocol (RFC 959)

Included

Included

FTP extensions (multi-part, resume, parallel threads, file integrity checking, custom commands, S-Key, PASV port range, UTF-8, customizable banner, command blocking, EBCDIC mode, PASV port range controls, plus more)

Included

Included

SSL/TLS 1.2 – for secure communications

Included

Included

SSL certificate management

Included

Included

SSL control over ciphers, algorithms, and protocols

Included

Included

All protocols: Real-time session monitoring

Included

Included

FIPS 140-2 certified cryptographic module for SSL

ESM

ASM

SFTP protocol (https://filezilla-project.org/specs/draft-ietf-secsh-filexfer-02.txt et. al)

SFTP

Included

SFTP advanced options (multiple auth methods)

SFTP

Included

SFTP key management

SFTP

Included

SFTP control over ciphers, algorithms, and protocols

SFTP

Included

FIPS - FIPS 140-2 certified cryptographic module

SFTP, ESM

ASM

HTTPS protocol

HTTP/S

Included

HTTPS extensions (various auths including IWA/SSO, configurable headers, compliance with OWASP security guidelines, HSTS support, many other headers,)

HTTP/S

Included

Web client – Built-in web client adds a rich set of features compared to script-driven HTTP/S transfers

HTTP/S

Included

HTTP->HTTPS auto-redirect

HTTP/S, ESM

ASM

Native Mobile Transfer Client (MTC) – For iOS and Android

HTTP/S, MTC

Included

Accelerate file transfers using EFT Event Rule Actions (not available after 8.0.5.7)

N/A

N/A

AS2 protocol

N/A

AS2 module

EFT-managed accounts

Included

Included

Active Directory (AD) – native Windows integration

(In EFT Arcus, "AD impersonation" is available, but not authentication.)

Included

Included

ODBC - leverage any ODBC data source

Included

Included

LDAP - authenticate against LDAP sources, including AD

N/A

Included

SAML (WebSSO) - including Just In Time (JIT) provisioning

N/A

ASM

RADIUS - often used as a two-factor authentication source

N/A

ASM

SMS authentication - two-factor authentication (2FA) for WTC and Workspaces

(In EFT Arcus, the "out-of-bad" passcode to pick up files is available. "SMS Config" is coming soon.)

ESM

ASM

RSA SecurID^® (native and Steel-Belted Radius (SBR))

N/A

ASM

CAC - Common Access Card authentication

N/A

ASM

AD Impersonation - Active Directory manages permissions

Included

Included

EFT managed folder permissions

Included

Included

Permission groups – templatize sets of permissions

Included

Included

Virtual folders - map virtual to physical folders including network shares

Included

Included

Home folders - designate a home folder and optionally make it the user's root folder

Included

Included

Set limits - number of logins, connections,  file sizes, transfer speeds, disk quotas

Included

Included

DoS detection algorithms and auto-IP ban logic

Included

Included

IP access rules - full featured IP access rule manager

Included

Included

Banned file types - prevent upload of unwanted file types

Included

Included

Monitor and kick offending users from the server

Included

Included

Invalid account names - controls to auto-ban offender IP

Included

Included

Invalid passwords -  controls to auto-lockout, disable, or ban IP

Included

Included

Password complexity - configure a number of password complexity options

Included

Included

Password reset - user-initiated or on initial login

Included

Included

Password reuse - disallow historical (previously used) passwords

Included

Included

Expire accounts - disable account on a given date

Included

Included

Encrypted folders - EFT built-in, secure-data-at-rest Solution

N/A

Included

EFS - encrypt data at rest using Windows' Streaming repository encryption (EFS)

ESM

ASM

OpenPGP - use OpenPGP to encrypt, sign, and decrypt data

OpenPGP

OpenPGP

PCI DSS - Site settings to facilitate PCI DSS and other compliance mandates

ESM, ARM

ASM,ARM

Silent installation - unattended setup

Included

Included

Administrator GUI - Windows based Graphical User Interface (GUI)

Included

Included

Remote administration - administrate from other systems in the network

Included

Included

Secure remote administration - SSL encrypted administration communications

Included

Included

Multiple administrators - allow concurrent administration

Included

Included

Secure administration - same password complexity options available for administrators as for users

Included

Included

Flexible authentication - leverage native, NTLM, or AD to authenticate administrators

ESM

ASM

Forensics - audit and report on all administrator activity and changes

ESM, ARM

ASM, ARM

COM API - programmatic administration

Limited

Included

Delegated administration - role based administrator accounts with granular permissions

Server and Site administrator only

Included

REST endpoint for querying administrative info and server status

Included

Included

Backup and Restore - one-click backup and easy restore of entire configuration

N/A

Included

Batch account management - perform actions to multiple accounts simultaneously (such as multi-select users to reset their passwords)

N/A

Included

Specify personal data and privacy settings on a Site and per user

ESM

ASM

Logging - flat file log in W3C and other formats

Included

Included

Monitor transfers in real time

Included

Included

View historical transfers in the administration interface

ARM

Included

Audit to SQL - audit transactions to a SQL database

ARM

ARM

View reports (predefined)

ARM

ARM

Create custom reports

ARM

ARM

Audit to Oracle - audit transactions to an Oracle database

N/A

ARM

React to stimuli - trigger workflows based on file uploads and other server events

Included

Included

Send email to users or administrators as part of a workflow

Included

Included

Execute a process, including scripts, as part of a workflow (Custom Commands only in Express and Enterprise)

Included

Included

Context variables - use transaction values inside of workflows

Included

Included

Folder monitor - trigger workflows immediately after files arrive in a monitored folder

Folder Monitor Module

Included

Schedule events - trigger workflows on a recurring basis

Timer Event Module

Included

Web Services - trigger workflows using Web Service calls; Invoke Web Service from URL

N/A

Included

Conditional logic - build fine-grained business logic into workflows

Included

Included

Cleanup Action - securely remove old files based on your organization’s data retention policies

N/A

Included

Upload and download - push or pull files to remote servers as part of a workflow

File Transfer Client module

Included

Send pre- and post- commands to mainframe during copy/move actions

N/A

Included

Perform folder and file operations

N/A

Included

Compress/Decompress files

Included

Included

User Account Action - for tasks like re-enabling user accounts and compliance requests (for example, HIPAA, GDPR) in which users might ask that an organization remove all traces of their account.

Included

Included

Advanced workflows - tap into the Advanced Workflow Engine to build sophisticated workflows

N/A

AWE

Integration with antivirus and DLP (Data Loss Prevention) tools to permit or prevent transfers based on policies.

NOTE:

• Content Integrity Control is used in event rules to send a file to an external antivirus scanner or data loss prevention solution for processing.
• Customer must install an antivirus/ data loss prevention solution. Any third-party content inspection product that supports ICAP can communicate with the Content Integrity Control module.
• EFT Arcus has built-in Windows Defender antivirus protection at the OS level.

ESM

ASM

Integration with cloud (AWS and Azure) storage; Copy, move, and download from cloud storage

Cloud Connector Module

Included

Ability to monitor and act upon AWS S3 and Azure blob storage activity

Cloud Connector Module

Included

Centralized control for automating transactions originating from distributed systems (Remote Agents), including provisioning, management and Event Rules

N/A

RAM

Reusable connection profiles for use in Event Rules

N/A

Included

Run PowerShell scripts in Event Rules

Included

Included

Ad hoc file transfer – Allow authorized users to share files or folders with guest users via Outlook or using EFT’s web interface, for secure P2P file exchange

HTTP/S, Workspaces

Workspaces

Two-way file sharing - recipients provided with multiple methods to securely send files to each other

HTTP/S, Workspaces

Workspaces

Receipt notification - email notification when files are picked up by the recipient

HTTP/S, Workspaces

Workspaces

Pick-up authentication - recipients can be required to verify their identity before downloading files

HTTP/S, Workspaces

Workspaces

Full file tracking - Users and administrators can view complete history of files sent and received

HTTP/S, Workspaces

Workspaces

Centralized policy controls - administrator can set defaults and mandate policies or let authorized users decide

HTTP/S, Workspaces

Workspaces

Mixed mode authentication - optionally authenticate internal employees against AD, while maintaining guest isolation

HTTP/S, Workspaces

Workspaces

Integration with EFT - monitor all ad hoc file transfer activity from EFT

HTTP/S, Workspaces

Workspaces

Request files – Authorized users can generate a request link that guests follow to securely upload files.

HTTP/S, Workspaces

Workspaces

Drop-off files to internal users with no attachment limits

HTTP/S, Workspaces

Workspaces

Manage personal data and privacy settings for GDPR and other privacy rules in the Workspaces client

HTTP/S, Workspaces, ESM

Workspaces, ASM

Multifactor authentication via email or SMS for client logins

HTTP/S, Workspaces, ESM

Workspaces, ASM

Gather metadata for uploads in the client via upload forms

HTTP/S, Workspaces

Workspaces

IPv6 - Full dual stack (IPv4/6 mixed) support

Included

Included

Virtual - Install on virtual machines, e.g. VMware and Hyper-V

Included

Included

Unicode - UTF-8 encoding of filenames and other fields where applicable

Included

Included

IDN - Internationalized domain name support

Included

Included

I/O Completion Ports - Technology that allows for fast performance on Windows systems

Included

Included

Active-passive clustering - Failover for high availability

Included

Included