Advanced Properties Details

Name Type Default Min Max Description
AccelConnectionTimeout string none 0 4096 Connection timeout for FAST accelerated transfers. If blank, connection timeout in the Copy/Move advanced options will be used. Otherwise, timeout is specified as X:Y where X is seconds and Y is bytes. The timeout will then be computed as X seconds for every Y bytes.
AccelFileSizeThresholds string none 0 4096 Sets the file size thresholds for accelerated transfers. Form is minMBytes|maxSmallMBytes| maxMediumMBytes. Files under minMBytes will use HTTPS rather than accelerated transfers. Files under maxSmallMBytes are considered small files while files over maxMediumMBytes are considered large files. DMZ uses these file size categories to size its internal buffers for improved performance.
AccelSLLConnectMaxHandshakeA ttempts uint32_t 5 0 4294967295 For a single FAST accelerated connection attempt, maximum number of SSL connection attempts to try in the presence of SSL handshake errors.
AccelSSLConnectTimeBetweenHa ndshakeAttemptsInMs uint32_t 30.0.0 0 4294967295 For a single FAST accelerated connection attempt, time between SSL handshake attempts in milliseconds.
ADUsersAlwaysEnabled bool false none none If it's true then users will always enabled by AM for AD sites
AKVRecoveryAccessKey string n/a 0 512 Optional property to recover Secrets Module vault. Overrides AccessKey/ClientID of Secrets Module vault. (There is no cleanup of AP - user must remove these entries after startup, if desired, otherwise it will keep overwriting settings.)
AKVRecoveryHost string n/a 0 512 Optional property to recover Secrets Module vault. Overrides Host of Secrets Module vault. (There is no cleanup of AP - user must remove these entries after startup, if desired, otherwise it will keep overwriting settings.)
AKVRecoveryPassword string n/a 0 512 Optional property to recover Secrets Module vault. Overrides Password/ClientSecret of Secrets Module vault. (There is no cleanup of AP - user must remove these entries after startup, if desired, otherwise it will keep overwriting settings.)
AKVRecoverySiteID string n/a 0 512 Mandatory property to recover Secrets Module vault.
AllowDeleteVFSFolders bool false none none Enables/disables the ability for AD users to delete or rename VFS folders. Possible values: 0 - Do not allow AD users to delete/rename VFS folders; 1 - Allow AD users to delete/rename VFS folders (the default if the key is not present)
AllowedHostHeaderList string * 0 4096 Allow host headers only to these values. The default is '*', which means all hosts.
AllowMethodKIA bool true none none Specifies whether to allow method KIA (1 to allow). Default 1.
AllowNonCACUsers bool false none none True if to allow login of non CAC users for CAC sites.
AllowToTryLoginUnlistedUsers bool false none none Allows EFT to create accounts for unlisted users by NT4AccountName and UPN.
Applet_only bool false none none This setting disables use of the PTC as a fallback if no WTC licenses are available. Possible values: 1 - If all WTC licenses are used then issue a message to this effect to the user instead of going to the PTC otherwise - Redirect the user to the PTC (the default if the key is not present)
ARMLogMinStalledThreads uint32_t 0 0 4294967295 The duration to use to determine if a thread should be considered “stalled.” Meaning if this is set to 1000 then any thread that waits longer than 1 second is classified as stalled. This is used only for logging purposes.
ARMLogStalledThreadMinDuration uint32_t 1000 1000 4294967295 The minimum amount of time in milliseconds a thread must be waiting before it is considered stalled. Only used for logging purposes.
ARMQueueSize uint32_t 100000 1000 4294967295 Maximum size of the ARM auditing queue.
AS2TempFolderPath string none 0 4096 Path to the folder to store temporary files with AS2 requests (EFT install folder by default).
AuditBannedSocketConnections bool true none none Skip auditing of banned socket connections. Set to True by default.
AuditFailedAuthforNonExistingUs ernames bool false none none Skip auditing of all invalid username authentication attempts. Set to False by default.
AuditFailedAuthforUsernameRoot bool false none none Skip auditing of ‘root’ and ‘administrator’ invalid username authentication attempts. Set to False by default.
AuditFailedSocketConnectionsOt her bool true none none Skip auditing of other failed socket connections. Set to True by default.
AuditIsInternal bool false none none Skip auditing of non-CRUD (IsInternal) transactions. Set to False by default. When set to true, EFT will audit a row to protocol commands for resources that have an IsInternal flag set to 1. For example, IsInternalflag is set to 1 for HTTP protocol GET requests for reserved paths.
AuditIsRESTAdmin bool false none none Skip auditing of Administrative REST calls. Set to False by default.
AuditIsRESTRAMAgent bool false none none Skip auditing of RAM REST calls. Set to False by default.
AuditIsRESTUSER bool false none none Skip auditing of user-initiated REST calls. Set to False by default.
AuditIsRESTWorkspacesInternal bool false none none Skip auditing of Workspaces config REST calls. Set to False by default.
AuditRedundantUserAndPass bool true none none Skip auditing of username and password for S/FTP/S events. Set to TRUE by default.
AuditRESTWorkspaces bool false none none Skip auditing of Workspaces REST calls. Set to False by default.
AuditSuccessSocketConnections bool false none none Skip auditing of successful socket connections. Set to False by default.
AuditUnimportantCommands bool false none none Skip auditing of unimportant (non CRUD) operations. Set to FALSE by default. When set to true, EFT will audit all protocol commands to tbl_ProtocolCommands;
AuthManagerWithMultiStepChallenge string Enter the RSA SecurID token to complete authentica tion 0 225 Specifies the challenge text to display after succeeding with AuthManager authentication, prompting user for RSA/RADIUS input. Default: Enter the RSA SecurID token to complete authentication.
AutoBanAnonymousUnauthorizedAccessServicePathAllowList string paths none none Auto-ban will ignore processing non-public access to the paths specified. (Public paths include WTC and Workspaces portals) "AutoBanAnonymousUnauthori zedAccessServicePathAllowList ":[ "/", "/custom-service", "/sp/samlv2/sso"
AutoBanAnonymousUnauthorize dAccessServicePathBlockList string paths none none Auto-ban will ban access to the paths specified. "AutoBanAnonymousUnauthori zedAccessServicePathBlockList" :[ "/mysql-admin/index.php", "/administrator/phpMyAdmin/i ndex.php", "/sql/sql-admin/index.php "
AutobanLimit uint32_t 5,000 0 100,00 0 This key value sets the maximum number of IP autoban rules.
AutobanSensitivityLevelForAdmin Connections uint32_t 3 0 5 This key value sets the flood/hammer auto-ban sensitivity level for admin connections. Possible values: 0 - Off 1 - Very low 2 - Low 3 - Medium (the default if the key is not present) 4 - High 5 - Very high
AutoDenyLoginAttemptswithSpec ificUsernames string empty 0 4096 Deny certain usernames without checking the user database, so you can reduce load on the authentication subsystem. String is not case sensitive and UTF-8 is supported, if an incoming authentication is attempted with one of the usernames, they get immediate auth failure. EFT log will report the default auth error (no additional logging provided for this). On service start, when Advanced Properties are initialized, it will list which users are auto-denied.
AutoExportAllAWTasksToFiles bool false none none Automatic exporting all AWE tasks from EFT config db to aml files on disk.
AutomateInstallDir string false     Automate installation directory path.
AutomateRestApiPort unit32_t 11012 10000 12000 Automate REST API port.
AutomateServiceName string none   256  
AutoSelectPGPCiphers bool true none none Enable or disable auto select PGP ciphers.
AutoSelectPGPMAC bool true none none Enable or disable auto select PGP MAC hash.
AzureScaleInPostDrainWebhookURL string none none 128 URL to invoke when EFT has completed draining prior to scale-in.
BigCollectionsPageSize unit32_t 50 0   showing 50 records is the default; 0 = server-side paging is disabled (when AP is set)
CacheReservedFiles bool true none none Cache reserved files for HTTP(S)
CalculateQuotaForDisabledUsers bool true none none Calculate disc quota for a user even if the user account is disabled.
CalculateQuotaForNeverLoggedIn Users bool true none none Calculate disc quota for a user even if the user has never logged in.
CertTrustCheck bool false none none ClientFTP use MS Trusted Store to check server SSL certificate.
ChangePassByAD bool false none none If this registry value is set to 0 or not set at all then LDAP is used to change passwords, else AD is used.
CheckCRCAfterXfer bool false none none ClientFTP settings check CRC after transfer.
ClientFTPCacheLastConnectedIP bool false none none If set to 1 this key value allows ClientFTP to cache the IP address of the last successful connection to the supplied host. Cache lasts for the lifetime of the ClientFTP.DLL, which can cause problems if DNS entries change. This caching is a legacy feature of CuteFTP (from dial-up days) and is best left off.
ClientFTPEnableSNIExtTLS bool true     Enable Server Name Indication (SNI) extension to TLS protocol for ClientFTP's outbound connections.
ClientFTPOverrideLogging bool false none none If set to true this key value causes ClientFTP to retain the client log files after transfers are complete.
CloseFinishedItemLog bool true none none Enable or disable removal of successful client logs. Non-zero means enabled. By default successful logs are removed. after 7.2.0.0, the default is 1. Enable this AP and EnableXferLog to see SFTP handshake details.
CloudDownloadActionSanitizePat hWithUnderscores bool false none none Setting this to true will make Cloud Download Action replace incorrect characters with underscore (instead of URL encoded string).
CloudMultiPartSequentialTransfers bool false none none Force sequential transferring of multi-part cloud uploads.
ClusterCoherenceQueueDetectPrivateIP string autodetect 0 128 Determine whether to automatically detect private IP to advertise to other nodes. Default value is "autodetect". You can replace "autodetect" with the prefix of the IP address to find (e.g: "192.168" to match an IP address starting with 192.168.
ClusterCoherenceQueueMsmqType string msmq multicast 0 128 Determines the type of coherence queue to use when using MSMQ. msmq-multicast uses multicast-based MSMQ queues to sendadministrative updates. msmq-iterative uses point-to-point MSMQ queues. Default value is msmq multicast.
ClusterCoherenceQueueMulticastConfirmationTimeoutSecs unit32_t 30 0 2147483647 Specifies how much time (in seconds) EFT HA cluster node should wait for own multicast MSMQ message to arrive to its own coherence queue before failing send attempt.
ClusterCoherenceQueueMulticastMaxRetryCount unit32_t 5 0 2147483647 Specifies how much retry attempts EFT HA cluster mode should make when sending multicast MSMQ message to coherence queue.
ClusteredRuleHeartbeatPeriodSecs unit32_t 10 10 3600 This specifies the heartbeat period in seconds for clustered event rules. The smaller the period the sooner nodes will notice when another node has gone down, but more frequent heartbeats incur increased overhead for the production and processing of the associated event rule queue traffic.
ClusterOutOfSyncGracePeriodSecs string 10 1 42949 67295  
ClusterOutOfSyncHealSecs unit32_t 30 0 4294967295  
CommandChannelTickle unit32_t 4 0 4294967295  
CompressActionProcessorAffinityMask string none 0 4096 Sets the processor affinity mask for de/compression threads. Used to isolate de/compress threads to a subset of available processors in cases where CPU bandwidth is limited. An example value is 0x55555555 -- an alternating sequence of 0 and 1 bits to limit de/compress activity to half of the available processors, leaving the remaining processors to handle other activities. Caution: in some cases, de/compression COM errors have been observed when setting this AdvancedProperty.
CompressActionThrottle string none 0 4096 Compress Action Throttle: when this key is of the form X:Y, a compress action will sleep X milliseconds of every Y milliseconds elapsed. This throttle is used to avoid excessive CPU utilization on machines with limited CPU bandwidth. Does not apply to ZCompress compression or to decompression actions. Example value is 200:400 to sleep 200 milliseconds of every 400 milliseconds elapsed.
CompressActionTimeout unit32_t 0 0 4294967295 This key value sets the timeout in seconds for the de/compression action. The default is 0, meaning that the timeout is disabled.
ConnectionTimeout unit32_t 10 0 4294967295 ClientFTP settings connection timeout; Override retry logic for ClientFTP.dll; (See also DefaultDelay, DefaultRetry)
CopyClientFTPSettingsToRegistry bool false none none Use this property to copy all ClientFTP settings to registry. Disabled by default.
CreatePGPRSAKeyWithSubkey bool false none none If set to true allowed create additionally RSA subkey.
CsrfCookieSameSitePolicy string Lax 0 225 Let server require that cookies shouldn't be sent with cross site requests. Acceptable values are "Strict","Lax","None". Values other than these will result in "Strict" value. EFT v8 is set to Strict (0) by default. If you are using FF for Workspaces pickup, it will display a 404 Object not found error unless you change it to "Lax."
DecompressActionBeginFileTimeout unit32_t 0 0 4294967295 This key value sets the timeout in milliseconds for the first BeginFile callback during decompression. Default is 0, meaning the timeout is disabled.
DecompressActionScanTimeout unit32_t 0 0 4294967295 This key value sets the timeout in milliseconds for a decompression action scan operation. Scan is used primarily when autodetecting the archive format. Default is 0, meaning the timeout is disabled.
DefaultDelay unit32_t 5 0 2147483647 This setting overrides ClientFTP's default delay in seconds for connection retries.; Override retry logic for ClientFTP.dll (See also DefaultRetry, ConnectionTimeout)
CSPHeaderOverride string false     Use this string it as custom CSP header instead of default. An empty string turns off CSP header. default-src 'self' 'unsafe-inline' 'unsafe-eval' data:;
DefaultLocalPath string none none 4096 ClientFTP default local path.
DefaultRetry unit32_t 3 0 2147483647 This setting overrides ClientFTP's default number of connection retry attempts. Override retry logic for ClientFTP.dll (See also DefaultDelay, ConnectionTimeout)
DefaultTransferType unit32_t 0 0 42949 67295 ClientFTP settings transfer default transfer type.
DeferAllowedConnectionsCheckForXForwardedHTTPHeaders bool false none none Defer checking if a connection is allowed until the IP address is known from the receipt of X Forwarded-For headers (Use behind AWS Load Balancer)
DelayBeforeVersionString unit32_t 0 0 4294967295 Introduces a delay of the given number of milliseconds before ClientFTP sends its SSH version to a remote server.
DeleteLogsAfterCloseTE bool false none none ClientFTP delete all logs after closing.
DeleteOldLogs bool false none none ClientFTP delete old logs after closing.
DictionaryLegacyCheckIncludeSpecialDigits bool false none none When true, EFT will not trim leading and trailing special characters (e.g. #, ~, !, etc. or numbers (0-9)) from password on checking against the dictionary.
DirectDownloadRedirectIfNoCSRFToken bool false none none For direct downloads, redirect to obtain CSRF token if none is present. Default is false.
Disable_xframeoptions bool false none none This setting disables sending of the X-FRAME-OPTIONS header for the WTC and PTC. Possible values: 1 - Do not send X-FRAME OPTIONS header otherwise - Send X-FRAME OPTIONS header (the default if the key is not present)
DisableARMBatchSQL bool false none none There is no easy way to ignore errors and keep applying requests when applying a large queue of requests in one request (BatchSQL). Thus, DisableARMBatchSQL was added to disable the BatchSQL feature, and then sql requests will be applied one at a time (as was in 7.4 and earlier. It is recommended to turn it on only when large queues of requests are dropped or the order is changed, leading to a decrease in performance in ARM.
DisableARMFileImporter bool false none none If set to 1 this key value disables the ARM auto import feature.
DisableCOMBCommand unit32_t false none none Used to disable the COMB command to avoid problems with multipart uploads causing multiple file upload events. Restricting transfers to one part uploads will result in slower transfers, but greatly reduces headaches when you want to process uploaded files, because a file upload success is the entire file. This option is disabled by default (legacy behavior), but setting this DWORD registry value to a non-zero integer causes COMB to be disallowed and not shown in the response to FEAT.
DisableEFSChecksForPCIReport bool true none none Specifies whether to disable EFS check when for PCI Reports.
DisableHTTPAccountSecurity bool false none none This key value, when set to 1, disables the automatic HTTPS redirect for logins, forced password changes, lost username and password features.
DisableHTTPBasicAuthentication bool false none none Setting this to true will disable basic authentication for HTTP/S.
DisableMKCOLRequest bool false     Setting this to true will disable all MKCOL requsts for HTTP/S. By default value is false.
DisableUIInstallServiceButtonForNonServerAdminsAndNonLocalUsers bool false none none Setting this AP value = 1 will disable the install service button for non server admins and non-local users.
DiskQuotaBaselineCalculationFrequencyInDays unit32_t 1 0 30 Disk quota baseline calculation frequency in days.
DiskQuotaBaselineCalculationTim eoutInSec unit32_t 20 1 4294967295 Disk quota baseline calculation timeout in seconds.
DMZResolvesDNSNames bool false none none When DMZ Gateway is used as outbound proxy for Event Rule offload actions, should host names be passed to DMZ GW for DNS resolution? Default value is false.
DrainingTimeoutSecs unit32_t 900 0 86400 Draining timeout in seconds to allow for ongoing event rules and transfers to complete. Default is 900 seconds (15 minutes). Maximum is 86400 seconds (24 hours).
EmailTag string none none 1024 Optional header to be sent with emails. Format is the header name followed by the value with a space delimiter in between. Default is empty (no header added).
enable_iwa bool false none none This setting is used to enable/disable Single Sign-On Support (SSO) using IWA for the WTC and PTC and applies to all AD sites on the server.This feature is only supported by IE. Possible values: 1 - Enable SSO for the WTC and PTC clients otherwise - SSO is not supported (the default if the key is not present).
Enable10ColumnInClientLog bool false none none ClientFTP Enable 10 column in client log.
EnableCacheForDNType bool true none none When non-zero or absent, EFT caches types of DNs at AM synchronization time for AD sites.
EnableClientLogging bool true none none Enable or disable client logs. Non-zero means enabled. By default logs are enabled.
EnableCookies bool true none none Enable ClientFTP cookies.
EnableCreateRemotePathForSFTP bool true none none ClientFTP enable SFTP remote path.
EnableFEAT bool true none none ClientFTP settings connection enable FEAT.
EnableHTTPReferrerPolicyHeader bool true none none When zero, disable sending HTTP Referrer-Policy header.
EnableMultipart bool false none none ClientFTP settings transfer use multipart transfers.
EnableOldSkipBehavior bool false none none ClientFTP enable old skip behavior.
EnablePWD bool false none none ClientFTP enable PWD command.
EnableREST bool false none none ClientFTP enable REST command.
EnableSYST bool false none none ClientFTP settings transfer use SYST command.
EnableWorkspacesAttemptSyncEmail bool true none none Enables option to query auth provider when searching for a user account by invitee's email. Default is enabled.
EnableXferLog bool true none none ClientFTP enable transfer logs. Enable this AP and CloseFinishedItemLog to see SFTP handshake details.
EncryptedFolderKey string none 0 64 The 256-bit key (represented by 64 hexadecimal digits) used to encrypt and decrypt files in Encrypted Folders. When missed or malformed, the default key is used.
EventsCleanupDateType unit32_t 0 0 2 Specifies how EFT will determine a file's age for Event Rule file cleanup. Possible values: 0 - Create Date and Modify Date (the default if the key is not present) 1 - Create Date 2 - Modify Date
EventWebServiceResponseAddContextVariables bool false none none Setting this to true will add all context variables to event web service response.
EvtRuleChgLogMaxRecs unit32_t 500000 1000 1000000 This key value sets the max. number of records returned by the database.
ExcludeVFolderInQuotaCalc bool false none none Exclude virtual folders in quota calculation.
ExecuteTransferActionsInParallel bool false none none Specifies whether to run a group (grouped by IF Statement) of Transfer Actions in parallel. Set to 1 to enable. Default is 0.
ExternalLinkPortOverride unit32_t 0 0 65535 External port number that is appended to email; supersedes the old AP: PreserveSItePortForDefaultWorkspaceSendBaseUrl
FailOnPGPVerifyOfUnsignedFile bool true     If set to true, the Decrypt and Verify Signature OpenPGP action will fail if the target file is not signed. This has no affect on the Verify Signature Only OpenPGP action which always fails if the file is not signed.
FileNotFoundAsAccessDenied bool false none none File system: respond with access denied instead of file not found.
FileSizeLimit unit32_t 100 0 4294967295 ClientFTP settings transfer file size limit.
FileSystemItemThreshold unit32_t 50.0.0 0 4294967295 Warn level log for File System logging if the number of files/folders in a listing is beyond the threshold Default threshold is 50.0.0 files. A value of 0 disables this logging.
FileSystemTimeoutMSec unit32_t 20.0.00 0 4294967295 Timeout for File System object in milliseconds.
FileUploadEventResult bool false none none If present and nonzero this causees the output of an event rule executed custom command to be sent back over the FTP command channel.
FirstHealthCheckOnly bool false none none A nonzero value causes only one folder monitor's health check to be executed instead of running the health check for all folder monitors possibly exhausting network resources.
FixDoubleSlashInPathsForFTP bool false none none Specifies whether to treat double slash as a single one in path arguments of FTP commands (1 to enable) Default = 0.
FMWatcherStackSize unit32_t 65536 65536 1048576 This value sets the Folder Monitor Watcher threads stack size in bytes. If nonexistent the default size, 64 KB, is used.
FMWorkerStackSize unit32_t 131072 65536 1048576 This value sets the Folder Monitor Worker threads stack size in bytes. If nonexistent the default size, 128 KB, is used.
FolderMonitorFilterValue unit32_t 125 0 4294967295

This setting specifies a filter used against folder monitor file system events. By OR'ing combinations of the following bit masks together a filter can be created that allows only certain kinds of events to be processed. By default all except security events are processed, corresponding to a filter value of 0x0.0.00.0.07D.

Bit masks:

  • 0x0.0.00.0.001 - file name change

  • 0x0.0.00.0.004 - attribute change

  • 0x0.0.00.0.008 - size change

  • 0x0.0.00.0.010 - file write

  • 0x0.0.00.0.020 - file access

  • 0x0.0.00.0.040 - file creation

  • 0x0.0.000100 - security change
FolderMonitorHealthCheckTimeout unit32_t 20 0 4294967295 This setting specifies EFT's timeout period to receive the folder monitor health check file creation notification. The default is 20 s if the registry value is not present.
FolderMonitorUseIOCP bool false none none Specifies which thread model to use for the handling of folder monitor event notifications. Possible values: 0 - Use multi-threaded model, requires more memory but more robust (the default if the key is not present) 1 = Use the single threaded model, generally the best option when >500 folder monitors exist.
FolderMonitorUseNonInteractiveLogon bool false none none

Determines whether Folder Monitor will use non interactive login when monitoring remote folders. Possible values:

  • 0 - Use interactive login (the default if the key is not present)

  • 1 - Use non-interactive login, may be needed if EFT does not belong to the same domain as the folder

FolderMonitorWaitBeforeReconnect unit32_t 1 0 4294967295 This setting specifies the delay in seconds before attempting to reconnect after a folder monitor rule has detected a disconnect. The default is 1 s if the registry value is not present.
FolderMonitorWorkerThreadCount unit32_t 64 32 4294967295 The maximum number of concurrent threads for a folder monitor event rule. The default is 64.
ForcePWDCommand bool false none none ClientFTP don't skip PWD command.
ForceRFCPASVMode bool false none none ClientFTP force rfc PASV mode.
ForceTYPECommand bool false none none ClientFTP don't skip TYPE command.
ForwardedForHeader string none 0 255 Specifies the header, injected by load balancer, that contains origin IP address for connection. Default is blank, implying no trust in X Forwarded-For or similar header.
FreeVFSLifeTime unit32_t 30 0 4294967295 ClientFTP settings idle VFS lifetime; Time, in seconds, during which ClientFTP can re use connection to remote server in subsequent transfer.
FTPDiscardClientTimestamp bool false none none Disregard client initiated FTP MFMT command to change the date/timestamp of files.
FTPSYSTResponse string none 0 128 This setting specifies the string returned in the 215 response to the FTP SYST command. If this key is not present "UNIX Type: L8" is returned.
FoxLDAP bool true     Custom code for compatibility with Domino server. If enabled, the user's name is pre validated before querying the system's auth manager. Possible values: 0 - disables pre-login name checks (the default if the key is not present) 1 - enables pre-login name checks (Specific to customer; do not publish in KB.)
GetListingActionMaxRecursion unit32_t 10 0 9999999 Specify how deep recursive listing is allowed to into directory structure.
GlobalSpeed unit32_t 0 0 4294967295 ClientFTP settings transfer Command Channel Tickle During Upload; Only FTP/S and HTTP/S are affected by this setting. It simply divides the number in the registry by the number of current transfers and uses this value as a limit for each individual transfer. It counts all transfers including SFTP and local protocols, but only HTTP and FTP are actually limited.
GSAWEMaxiumQueuedTasks unit32_t 0 0 4294967295 The maximum number of AWE tasks that may be queued before dropping new tasks. If unspecified, the default value of 0 is used. 0 specifices no limit (unbounded).
GSFTPS_DB_TIMEOUT unit32_t 60 0 42949 67295 The number of seconds that are allowed for an ARM report to execute can be changed from the 60-second default.
Gw_keepalive unit32_t 300 0 4294967295 This key is used to specify a value in seconds for the DMZ Gateway ping period. If the key is not present the default period is 5 minutes.
Gw_retryattempts unit32_t 10 0 4294967295 This setting overrides DMZ Gateway number of connection retry attempts before next address resolving.
HaErrorHandlerDrainServer bool false none none When HaErrorHandler is recovering from an error, should it drain the server before restarting? Default value is false.
HAFullConfigDumpIntervalMins int 0 (off) 0 10 Interval in minutes between full config dumps to cluster share. A value of 0 (default) indicates full configuration is dumped on each change. Use this option to reduce network traffic for HA cluster share.
HAPropagatedAcceptFailureFatal bool false none none Specifies whether to treat the failure to accept change propagated across the cluster as fatal.
HSTSMaxAge unit32_t 31536000 1 63072000 This key sets the max-age value for the HSTS (String-Transport Security) header in seconds.
HttpCookieSameSitePolicy string Strict 0 255 Let server require that cookies shouldn't be sent with cross site requests. Acceptable values are "Strict","Lax","None". Values other than these will result in "Strict" value. EFT v8 is set to Strict (0) by default. If you are using Edge for CAC authentication, it will display a 404 Object not found error unless you change it to "Lax."
HTTPProcessThreadStackSize unit32_t 524288 0 2097152 The EFT HTTP Engine currently creates a separate HTTP processing thread to service each HTTP/S connection. By default these threads inherit the default reserved stack size of the main application thread, which is typically 1MB. This registry entry may be used to specify an alternate reserved stack size in environments where memory consumption is of concern. Care should be taken when reducing the reserved memory stack size lower than the default as if the size is too small stack overflows may occur.
HTTPReadBufferSize unit32_t 65536 16384 2097152 When specified the internal buffer for processing incoming data for HTTP reads will be set to this size. This was implemented for the Microsoft Project to assist in resolving a case where there is a high amount of latency between EFT and the SMB share. This latency causes poor upload performance. Using a larger buffer size partially mitigates this by writing a larger amount of data to the SMB share at a time.
HTTPReferrerPolicyAttributeString string no-referrer 0 255 When present, HTTP Referrer Policy header will contain this value.
HttpSocketDefaultTimeout unit32_t 60 TRUE 9999999 This value sets default timeout period in seconds for HTTP socket.
ICAPAllowMultipleMethodsForOn eURI bool false     When the AP is true, then ICAP client allows you to use ICAP Services with multiple methods (REQMOD and RESPMOD) on the same URI.
ICAPConnectionTimeoutInMs unit32_t 20.0.00 0 2147483647 Sets the maximum timeout value, in ms, for the CIC module to wait for connections to and reading responses from remote ICAP server. Default 20000 (20 sec). Setting the timeout higher than maximum will cause EFT to crash during file upload.
ICAPForceZeroPreview bool false     For support of Trellix (Macaffe) ICAP server. When its value is 1, Preview:0 header will be sent in Reqmod/Respmod requests, whether it gets "Preview from Options" request or not. Specifies whether to always send the `preview: 0` header in REQMOD/RESPMOD requests. Disabled by default.
ICAPUsePOST unit32_t 0 0 1 Specifies whether to use PUT(0 - default) or POST(1) in CIC HTTP requests (any value above 0 will be converted to 1).
ICAPUsePreview unit32_t 1 0 1 Specifies whether to use Preview mode (1 - default) or not(0) in CIC HTTP requests (any value above 0 will be converted to 1).
IgnoreClientCertificateRequests bool false none none If set to 1 this key value allows ClientFTP to attempt to continue the SSL handshake without specifying a client certificate.
IgnoreEncryptedFoldersInOutbou ndTransfers bool true none none  
IgnoreFolderEncryptionStatus bool false none none  
IgnoreNeverLoggedInLDAPUsers bool false none none  
IgnoreZeroFiles bool true none none  
IgnoreZeroUsersResult bool false none none  
InviteeRegistrationRoute string NewAccountPage none 64 The policy defines a title page for Workspace Invitee. Acceptable values are: "LoginPage" "LoginPageForDomainUser" "NewAccountPage" (default value) If "InviteeRegistrationRoute" is set to route to "LoginPage," and login page is set to auto redirect to SAML, then the user would get logged on by the IdP, and then routed back to EFT, after which the Workspace will be associated with the account, whether that account already existed, or was JIT created by EFT upon IdP validation. As such, user would be taken directly to the resource.
IPRulesLimit unit32_t 5,000 0 100, 000 This property sets the maximum number of IP access related event rules.
ISO8601noUTC bool false none none Remove UTC designation from timestamp (Z or +/- 0:00 at end of timestamp) (true, false)
KeepSessionOpenAfterDirectDownload bool false none none Setting this to true will keep web session alive after performing a download from a direct download link.
LegacyDirListBehavior bool false none none Specifies whether to capture folder/file permission information during directory listings. Possible values: 0 - Capture folder/file permissions during folder listing (the default if the key is not present) non 0 - Do not capture folder/file permissions during folder listing (legacy behavior); user will be allowed to attempt file system actions that may generate errors.
LegacySMTPSendBehavior bool true none none

This setting determines SMTP MIME support and send behavior.

Possible values:

  • 0 - legacy (EFT4) SMTP behavior

  • 1 - EFT5 behavior supporting 8 bit MIME encoding and proper send/recv sequencing of socket communication for SMTP protocol responses

LimitscClientBundle unit32_t 0 0 4294967295 Limits how many times EFT will attempt to bundle scClient; Default is 0, meaning unlimited rebundling attempts. Any non 0 value will limit the amount of rebundle attempts.
LogFlushTimer unit32_t 60000 100 4294967295 CuteLogger queue flush timeout (milliseconds)
LogPath string none none 4096 ClientFTP log path
LogToWindowsEventViewer unit32_t 0 0 3

Write EFT and ClientFTP logs to Windows Events log

  • 0: No logs

  • 1: EFT logs

  • 2: ClientFTP logs

  • 3: Both

MaxAdminConnectionCount unit32_t 0 0 4294967295 If present and nonzero this sets the maximum number of administrator connections, otherwise there is no limit.
MaxAnonymousAllUploadsSizeInGB unit32_t 10 0 4294967295 Max allowed size for all anonymous (drop-off send and anon reply) in GB.
MaxAnonymousRequests unit32_t 50 0 4294967295 Max number of concurrent anonymous requests that can occur on a Site.
MaxCachedReservedFileSizeKB unit32_t 0 0 (no cache) 4096 Allows for WTC reserved file/folder caching for HTTP(S) requests to cache based on file size instead of an entire directory. Max size (in KB) of reserved files which will be cached for HTTP(S) requests.
MaxCaptchaInstances unit32_t 100 0 4294967295 Max number of active CAPTCHAs.
MaxCloudMonitorExecutorsPerSite unit32_t 16 1 128 Maximum number of Cloud Monitor executor threads per site.
MaxFileActionReadSize unit32_t 65534 1 4294967295 The read limit in bytes for file action.
MaxFileActionWriteSize unit32_t 65534 1 4294967295 The write limit in bytes for file action.
MaxNumberConnections unit32_t 100 0   Overrides the default maximum number of connections per site for ClientFTP.
MaxParallelFolderZippers unit32_t 40 1 4294967295 Maximum number parallel of folder zipping activity on server.
MaxReCaptchaParallelRequests unit32_t 30 0 4294967295 Max number of Limit number of concurrent ReCaptcha validations on a Site.
MaxReCaptchaRequestTimeoutInSecs unit32_t 30 0 4294967295 Limit time of ReCaptcha validation.
MaxSubItemsInZippedFolder unit32_t 32768 1 4294967295 Maximum number of files/subfolders in zipped folder.
MODE_Z bool false none none Enables Mode Z for client FTP.
MultipartUploadSessionTimeoutSecs unit32_t 30 10 4294967295 This value sets the time period in seconds for the max time that any section of a multipart upload can go without the server receiving more info. Once this limit is reached, the server considers this upload a failure.
OCSPStaplingCacheTimeoutSec unit32_t 3600 0 4294967295 OCSP Stapling cache timeout.
OCSPStaplingEnable bool false none none Enable stapling of OCSP responses in the TLS handshake.
OCSPStaplingForceURL string   0 4096 Override the OCSP responder URI specified in the certificate's AIA extension.
OCSPStaplingResponseMaxAgeSec unit32_t 0 0 2147483647 Maximum allowable age for OCSP stapling responses. Default value (0) means cache responses until 'nextUpdate'.
OCSPStaplingResponseTimeSkewSec unit32_t 300 0 4294967295 Maximum allowable time skew for OCSP stapling response validation. Default value (300).
OpenPGPFIPSCompliantAlgorithmsOnly bool false none none Specifies whether to set the /n OpenPGP library to use only FIPS compliant algorithms (1 to enable). Default 0.
PasswordChg_EmailInterval string   0 4096 Number of days and frequency to send password change notifications for NTAD/LDAP Sites.
PasswordChg_MsgFileLocation string   0 4096 This specifies the location of the password change message files, used when sending notifications to WTC users when a password change is attempted. Applies only to AD/LDAP users.
PasswordChg_NTADLDAP string off 0 4096 This setting turns on/off the WTC NTAD/LDAP change password capability. Possible values: "on" - enables WTC change password capability "off" - disables WTC change password capability (the default if the key is not present).
PasswordResetLinkExpirationPeriodMinutes unit32_t 30 minutes 1 minute 1440 minutes (24 hours) When a password reset link is sent to a user, any attempt to send another reset link will invalidate the prior link (to test this, send yourself a link, don't use it, then send a new link, then attempt to change pass using first link).
PASVMode unit32_t 2 0 4 ClientFTP settings transfer FTP Transfer Mode.
PersonalDataEncryptionKey string none none 64 The 256-bit key (represented by 64 hexadecimal digits) used to encrypt and decrypt personal data. When missed or malformed, the default key is used.
PGPCompressionMethod string ZIP 0 255 Set PGP comrpession method. Acceptable values are "ZIP","ZLIB". The string values are case-insensitive. Values other than these will result in no compression taking place.
PGPEncryptingAlgorithm string CASTS 0 255 Set PGP cipher algorithm. Acceptable values are "CAST5", "3DES", "AES256", "AES192", "AES128", "BLOWFISH", "TWOFISH", and "IDEA". The string values are case insensitive.
PGPLogSuffixTemplate string none 0 1024 This specifies the template to be used for the generation of the PGP log filename date/time suffix. In v8.2, this AP was updated to add the Event Rule name and ARM action ID to the PGP log name.
PGPTaskExecutionTimeout unit32_t 60.0.000 0 4294967295 This setting specifies the number of milliseconds for the PGP task execution timeout. The default is 600,0.0.0 ms (10 minutes) if the registry value is not present.
PlainTextPasswordInServerLog bool false     If true, EFT does not scramble password when registering user commands in server log.
PortListenIP unit32_t 0 0 4294967295 ClientFTP settings transfer PORT listening IP.
PortMax unit32_t 0 0 65535 ClientFTP settings transfer default transfer type.
PortMin unit32_t 0 0 65535 ClientFTP settings transfer port range min.
PreserveLocalDate bool false none none ClientFTP preserve local date.
PreserveServerDate bool true none none ClientFTP preserve server date.
PreventPasswordResetUnauthorizedEmail unit32_t 0 0 4294967295 Default value is 0 and non existent. If enabled and set to 1, will prevent password reset unauthorized emails from being sent out for users that do not have this permission enabled.
ProxyProtocolHeaderTimeoutInMs unit32_t 6000 1 4294967295 Timeout for receiving the Proxy Protocol header after client has connected, in milliseconds.
QuantityUnitForDeleteLogs unit32_t 3 0 4294967295 ClientFTP delete logs older than (in UnitForDeleteLogs).
QueueBufferSize unit32_t 32768 255 4294967295 CuteLogger queue buffer size.
QueuedAsyncEventsLimit unit32_t unlimited n/a n/a For completed file uploads (all protocols), EFT will return a successful reply to client independent of any short or long running event rules kicked off by File Upload trigger. Use RunningAsyncEventsLimit (per server) and QueuedAsyncEventsLimit (per site) to control the maximum size of the running rule thread pool.
QueuedAsyncSubroutinesLimit unit32_t 0 0 4294967295 The maximum number of asynchronous event rule subroutines that may be queued before dropping new subroutine. A value of 0 (default) indicates there is no limit.
ReceiveBufferSize unit32_t 65536 0 4294967295 ClientFTP settings transfer Command Channel Tickle During Upload.
RedirectHTTPtoHTTPS bool false none none When this registry value is present and nonzero the following occur: The HTTP engine will be turned on even if the checkbox is off All HTTP requests will be serviced such that we immediately return a redirect to the HTTPS version of that same URL DMZ Gateway configuration updated accordingly so that redirections through EFT and the gateway work properly .
ReloadAUDOnSync dword 0 0 1 The local (GlobalSCAPE) Authentication Manager does not read contents from disk again even if you have configured a refresh interval. It just re-reads the internal memory array. This makes it difficult to externally keep two machines synced in a load balanced scenario. To have the refresh interval re-read the value from disk, as it does at Site startup time, set ReloadAUDOnSync to 1. The authentication manager reads client permission group informationfrom disk instead of internal memory (not valid after 7.3.3.21) .
RemoveLeadingSlash bool false none none Remove leading slash for CWD command.
RemoveLinksFromWorkspaceInvitations bool false none none When set to true will replace any links in the comment section of the folder-sharing email with the text "[LINK REMOVED]"
RenderDPIAReportAsJSON bool true none none If set to true, JSON format is used when rendering Data Protection Impact Assessment (DPIA) report.; used to change DPIA report format (JSON/XML).
ReplaceBackslashWithSlashInPathsForFTP bool true none none Specifies whether to replace backslash with slash in path arguments of FTP commands (1 to enable). Default 1.
ReplaceBackslashWithSlashInPathsForSFTP bool true none none Specifies whether to replace backslash with slash in path arguments of SFTP commands (1 to enable). Default 1.
ReplaceExistingOnRename bool false none none This value specifies whether to replace existing files upon rename. Possible values: 1 - Overwrite existing file upon rename otherwise - Leave existing file alone and issue an error (the default if the key is not present).
ReportsConnectionString string none none 1024 Specifies an alternate set of user credentials for use with reporting within the EFT administration UI. If the key value does not exist the credentials from the server's logs tab are used.
ResolveLinks bool false none none ClientFTP resolve links.
RestartByteOffset unit32_t false 0 65536 ClientFTP settings transfer restart offset in bytes.
RestrictionByFileNameOnUpload bool false none none A nonzero value reverses the transfer banning logic (set on a site's Advanced or Security tab) to act as a whitelist instead of the default blacklisting behavior.
ReuseSSLData bool false none none ClientFTP caching SSL session info for consequent connections.
RunningAsyncEventsLimit unit32_t 20 n/a n/a For completed file uploads (all protocols), EFT will return a successful reply to client independent of any short or long running event rules kicked off by File Upload trigger. Use RunningAsyncEventsLimit and QueuedAsyncEventsLimit to control the maximum size of the running rule thread pool.
RunningAsyncSubroutinesLimit unit32_t 10 0 4294967295 The maximum number of simultaneous asynchronous event rule subroutines running. A value of 0 indicates there is no limit.
RunningTaskLimit unit32_t 10 0 4294967295 The maximum number of simultaneous AWE processes. A value of 0 indicates there is no limit.
SamlAssertionSignatureEnforcementLevel unit32_t 0 0 4 Level of SAML assertion signature enforcement: 0 - required (default), 1 - not required if message signed, 2 - enforce if present, 3 - ignore result, 4 - do not attempt verification.
SamlMessageSignatureEnforcementLevel unit32_t 1 0 3 Level of SAML message signature enforcement: 0 - required, 1 - enforce if present (default), 2 - ignore result, 3 - do not attempt verification.
SAMLSSOClockSkewToleranceInMs unit32_t 180.0.00 0 4294967295 WebSSO / SAMLSSO Clock skew tolerance in milliseconds.
SAMLSSODigestAlgo string sha256 0 255 Specifies the SAML Digest Algorithm to use. Default value is sha256.
SAMLSSOSignatureAlgo string rsa-sha256 0 255 Specifies the SAML Signature Algorithm to use. Default value is rsa-sha256.
SecretsModuleEncryptionKey string none none 64 The 256-bit key (represented by 64 hexadecimal digits) used to encrypt and decrypt secrets. When missed or malformed, the default key is used.
SemaphoreDelay unit32_t 20.0.00 1 4294967295 This key value sets the time limit (in milliseconds) a thread is allowed to keep a semaphore locked.
SendPasswordReminderEmailForDisabledClient bool true n/a n/a When false, EFT will not send emails with password reminder for expired messages for disabled user account. When true or not defined, the value is enabled and emails will be sent to all users.
SendQUIT bool false none none ClientFTP settings connection send QUIT
SerialRetriesWhenUsingSameConnectionSettings bool true none none Enable or disable legacy ClientFTP logic: perform transfer retries in a serial mode when using the same connection settings for multiple transfers.
ServeRobotsFile bool false none none Setting this to true will allow access to the robots.txt file. A summary of what this is supposed to accomplish can be found at http://www.robotstxt.org/robo tstxt.html
SFTP2_AES128 bool true none none Setting to 1 enables the AES128 cipher algorithm.
SFTP2_AES128_GCM_AT_OPENSSH_COM bool true none none Setting to 1 enables the aes128-gcm@openssh.com cipher algorithm.
SFTP2_AES128CTR bool true none none Setting to 1 enables the AES128CTR cipher algorithm.
SFTP2_AES192 bool true none none Setting to 1 enables the aes192-cbc cipher algorithm.
SFTP2_AES192CTR bool true 0 1 Setting to 1 enables the aes192-ctr cipher algorithm.
SFTP2_AES256 bool true none none Setting to 1 enables the AES256 cipher algorithm.
SFTP2_AES256_GCM_AT_OPENSSH_COM bool true none none Setting to 1 enables the aes256-gcm@openssh.com cipher algorithm.
SFTP2_AES256CTR bool true none none Setting to 1 enables the AES256CTR cipher algorithm.
SFTP2_ARCFOUR bool false none none Setting to 1 enables the ARCFOUR cipher algorithm.
SFTP2_AuthByKey bool false none none Enable ClientFTP SFTP authentication by key.
SFTP2_AuthByPassword bool true none none Enable ClientFTP SFTP authentication by password.
SFTP2_Blowfish bool false none none Setting to 1 enables the Blowfish cipher algorithm.
SFTP2_CAST128 bool false none none Setting to 1 enables the CAST128 cipher algorithm.
SFTP2_CHACHA20_POLY1305_AT_OPENSSH_COM bool true none none Setting to 1 enables the chacha20 poly1305@openssh.com cipher algorithm.
SFTP2_ForceUseFSTAT bool false 0 1 When non-zero, ClientFTP enables a workaround for SFTP servers which give wrong response for LSTAT request: regular attributes for non existent files without any errors.
SFTP2_HMAC_SHA1_ETM_AT_OPENSSH_COM bool true none none Setting to 1 enables the hmac sha1-etm@openssh.com algorithm.
SFTP2_HMAC_SHA2_256_ETM_AT_OPENSSH_COM bool true none none Setting to 1 enables the hmac sha2-256-etm@openssh.com algorithm.
SFTP2_HMAC_SHA2_512_ETM_AT_OPENSSH_COM bool true none none Setting to 1 enables the hmac sha2-512-etm@openssh.com algorithm.
SFTP2_Log bool false none none Set to 1 to enable ClientFTP SFTP logging.
SFTP2_Log_Level unit32_t 9 0 2147483647 ClientFTP SFTP log level.
SFTP2_MD5 bool true none none Setting to 1 enables the MD5 MAC algorithm.
SFTP2_MD5_96 bool true none none Setting to 1 enables the MD5_96 MAC algorithm.
SFTP2_RIJNDAEL_CBC_AT_LYSATOR_LIU_SE bool true none none Setting to 1 enables the rijndael-cbc@lysator.liu.se cipher algorithm.
SFTP2_SHA1 bool true none none Setting to 1 enables the SHA1 MAC algorithm.
SFTP2_SHA1_96 bool true none none Setting to 1 enables the SHA1_96 MAC algorithm.
SFTP2_SHA2_256 bool true none none Setting to 1 enables the SHA2_256 MAC algorithm.
SFTP2_SHA2_512 bool true none none Setting to 1 enables the SHA2_512 MAC algorithm.
SFTP2_TripleDES bool true none none Setting to 1 enables the TripleDES cipher algorithm.
SFTP2_Twofish bool true none none Setting to 1 enables the Twofish cipher algorithm.
SFTP2_TWOFISH128 bool true none none Setting to 1 enables the TWOFISH128 cipher algorithm.
SFTP2_TWOFISH256 bool true none none Setting to 1 enables the TWOFISH256 cipher algorithm.
SFTP2_UMAC_64_AT_OPENSSH_ COM bool true none none Setting to 1 enables the umac 64@openssh.com algorithm.
SFTP2_UMAC_64_ETM_AT_OPEN SSH_COM bool true none none Setting to 1 enables the umac 64-etm@openssh.com algorithm.
SFTP2_UseCompression bool true none none Enable ClientFTP SFTP compression.
SFTP2PrivateKey string none 0 4096 ClientFTP SFTP private key.
SFTP2PublicKey string none 0 4096 ClientFTP SFTP public key.
SftpClientCiphers string none 0 512 Override client's enabled Ciphers and their order. Example: "SftpClientCiphers": "aes128-ctr,aes192-ctr,aes256 ctr" The combined values should be comma separated *without* any additional characters. (If not set, then it uses default ordering which is same as server inbound order.)
SftpClientKexAlgorithms string none 0 512 Override client's enabled KEXes and their order Example: "SftpClientKexAlgorithms" : "ecdh-sha2-nistp256,ecdh sha2-nistp384,ecdh-sha2 nistp521,diffie-hellman group14-sha1,diffie-hellman group-exchange-sha256" The combined values should be comma separated *without* any additional characters. (If not set, then it uses default ordering which is same as server inbound order.)
SftpClientMACs string none 0 512 Override client's enabled MACs and their order. Example: "SftpClientMACs": "hmac-sha2 256,hmac-sha2-512,hmac sha1" The combined values should be comma separated *without* any additional characters. (If not set, then it uses default ordering which is same as server inbound order.)
SFTPDiscardClientTimestamp bool false none none Disregard client initiated SFTP SSH_FXP_FSETSTAT and SSH_FXP_SETSTAT command to change the date/timestamp of files.
SFTPEnableGroup1Kex bool false none none Enable or disable diffie hellman-group1-sha1 KEX for SFTP.
SFTPEnableGroupsExchangeKex bool true none none Enable or disable diffie hellman-group-exchange-sha1 and diffie-hellman-group exchange-sha256 KEXes for SFTP.
SFTPOutQueueBytesLimit unit32_t 1048576 0 4294967295 Specifies(in bytes) upper limit of SFTP out queue. 0 - no limit.
SFTPProcessThreadStackSize unit32_t 524288 0 2097152 The EFT SFTP Engine creates a separate SFTP processing thread to service each SFTP connection. By default these threads inherit the default reserved stack size of the main application thread, which is typically 1MB. This registry entry may be used to specify an alternate reserved stack size in environments where memory consumption is of concern. Care should be taken when reducing the reserved memory stack size lower than the default as if the size is too small stack overflows may occur. Change default stack size to 512Kb.
SFTPWinFileReadWriteBufferSizeKB unit32_t 256 0 8192 SFTP file read/write buffer size, in KB. Zero means buffering is disabled.
ShowExportRemoteAgentsToCsvControls bool false 0 1 Shows the 'Export to CSV' button on the Remote Agents UI.
ShowLogTimeStamps bool true none none ClientFTP show timestamps in logs.
ShowQuotaControls bool false none none Show quota controls.
ShutdownHttpsListenerOnDrain bool false none none Determines if EFT should shutdown the HTTP/S server socket(s) immediately upon entering draining. 1 shutdowns listeners immediately, 0 leaves them open. Default value is 0 to leave HTTP/S listeners open to accommodate WTC chunking.
SimpleDirListing bool false none none ClientFTP use simple dir listing.
SiteStartDelay unit32_t 0 0 4294967295 Insert a small delay, in milliseconds prior to the initial Site start. 0 means no delay and is the default behavior. Any other value equals to milliseconds delay.
SiteStartRetries unit32_t 0 0 4294967295 Retry Site start if the startup failed due to ports in use error. 0 means no Retry and is the default behavior. Any other value indicates number of retries(e.g. 1, 3, 15, etc.).
SiteStartRetryDelay unit32_t 0 0 4294967295 A Retry delay for the Site start retry, in milliseconds. 0 means no Retry delay and is the default behavior. Any other value indicates delay in milliseconds.
SmtpTlsMaxVersion unit32_t 3 0 4

SmtpTlsMaxVersion:

  • 0 - SSL 3.0

  • 1 - TLS 1.0

  • 2 - TLS 1.1

  • 3 - TLS 1.2

  • 4 - TLS 1.3
SmtpTlsMinVersion unit32_t 3 0 4

SmtpTlsMinVersion:

  • 0 - SSL 3.0

  • 1 - TLS 1.0

  • 2 - TLS 1.1

  • 3 - TLS 1.2

  • 4 - TLS 1.3

SSLCertificate string none 0 4096 ClientFTP client SSL certificate
SSLPrivateKey string none 0 4096 ClientFTP client SSL private key
StatisticsAuditInterval string 60 1 9999999 In minutes. When EFT is running, it writes to the ServerStats.db and SiteStats.db tables once an hour, one ROW for each occurrence. The snapshot interval can be changed with an advanced property, StatisticsAuditInterval. 60 minutes is the default. The shortest interval allowed is 1. If it is 0, then EFT will use the default of 60 minutes.
SterlingConnectServerCCCLogic bool false none none Use CCC command workaround for Sterling Connect Server.
TimerStackSize unit32_t 393216 0 4294967295 This value sets the timer stack size in bytes. If nonexistent or 0 the legacy size, 1 MB, is used.
TraceLIST unit32_t 0 0 4294967295 ClientFTP trace list.
TransmitBufferSize unit32_t 65536 0 4294967295 ClientFTP settings transfer Command Channel Tickle During Upload.
Treat5xxAs4xx bool false none none ClientFTP treat 5xx errors as 4xx.
TreatLinksAsFiles bool false none none ClientFTP treat links a s (1 - file, 2 - folder).
TreatLNKFiles bool false none none ClientFTP treat .lnk as files in listings.
TreatSkipAsFailure bool false none none Treat skip result as a failure when transferring files.
TunnelNonHTTPVerbs bool false n/a n/a If NOT present (default) or set to false, it means WTC will continue to use MKCOL, COPY, etc. If present and set to true, WTC will use POST with X-HTTP Method-Override header for tunneling non-standard HTTP verbs. See also DisableMKOLRequest for v8.2.0.0 and later.
Twofactor_continue_messages string none 0 128 Two factor continue prompts; Comma-separated list of RSA or RADIUS server challenge messages (like "XXXXXXX. Press enter to continue.") for which EFT Web login page displays Continue button. Works only when "use_registry" AP is TRUE.
UnitForDeleteLogs unit32_t 2 0 2 ClientFTP unit for logs deletion (0 - minutes, 1 - hours, 2 - days).
UploadQuotaUpdateIntervalSecs unit32_t 3 1 999 Interval in seconds for upload quota updates to persist and propagate across HA cluster. Uploads from these protocols are included: HTTP/S, SFTP, FTP/S, AS2 Usage count will persist through server restarts Usage count will reset at the end of the calendar month. EFT will count data (usage count) that is written to disk including failed, aborted, or broken transfers. EFT will remember the last changed upload quota in registry and reuse it as "default" for the folders for which the quota has not been specified, so admin can use same upload quota for mass quota management routine.
UploadsPerClient unit32_t 0 0 4294967295 This key value sets the maximum number of client uploads to use together with an interval (specified in UploadsPerClientInterval) to derive a maximum client upload rate.
UploadsPerClientInterval unit32_t 0 0 4294967295 This key value sets the interval (in seconds) to use together with the maximum number of client uploads (specified in UploadsPerClient) to derive a maximum client upload rate.
UplReqDel bool false none none

Specifies whether delete permission is checked when uploading files.

Possible values:

  • 0 - Only upload permission is used to determine if a file can be uploaded, always overwriting existing files (the default if the key is not present)

  • 1 - Also check delete permission and disallow overwrite if delete not permitted

Use_registry bool false none none If this key is set to 1 then EFT will use paths specified in the registry for WTC and PTC resources instead of the hard coded paths.
UseAbsulutePath bool false none none If true, ClientFTP references remote files/folders by their absolute (full) path. Otherwise, it first changes working directory to file/folders's parent and then references the file/foldr by name. CuteFTP help may contain more details.
UseAbsulutePathForLIST bool false none none Same as UseAbsulutePath but only for when doinf folder listing. CuteFTP help may contain more details.
UseAuthManagerPasswordForMu ltistep bool false none none When non-zero, EFT, after successful authenticating user with their password against site's auth manager, uses the password to authenticate the user against RSA/RADIUS.
UseAuthManagerWithMultiStep bool false none none When non-zero, causes Authentication to FIRST uses the site's auth manager and, if succeeded, proceed to RSA/RADIUS authentication to finish authentication.
UseBufferedArchiveWriter bool false none none Setting this to 1 causes buffering of config file updates before a file write is performed.
UseCRCCheckWithRules bool false none none ClientFTP use CRC check for smart overwrite.
UseExclusiveSharingModeForUploads bool false none none When non-zero, EFT uses exclusive sharing mode for file uploads to lock the file so that other applications can't affect the transfer.
UseIdInWorkspaceLink bool false none none Disabled by default. When true, The sharing link will contain the workspaceId instead of the "workspace name (owner)"; EFT will redirect the user to the proper folder (with current format) when the authentication is passed.
UseLegacySFTP bool false none none Switch to the old implementation of SFTP.
UseLimitPortRange bool false none none ClientFTP settings transfer limit port range; If, true, uses "PortListenIP".
UseLISTCommand bool true none none ClientFTP use LIST command for smar overwrite.
UseMD5PasswordHash bool false none none Allows EFT to Accept ODBC Database Passwords that are MD5 Hashed if key value is present and nonzero.
UserAccountTriggersOnOriginatingNodeOnly bool false none none Setting this to true will make User Account Triggers to run on originating node only. Default is true.
UserAgent (_UserAgent) string TED.6 0 4096 ClientFTP user agent name\version; allows overriding HTTP "User-Agent" header for ClientFTP transfers.
UserAgentHeaderMustUseOTP string 0 0 512 Similar to UserAgentHeaderSkipOTP, it contains a list of user agents that are required to use OTP even if it is a known agent (such as CuteFTP or Outlook Add-in) This list takes priority over UserAgentHeaderSkipOTP. e.g.: "UserAgentHeaderMustUseOT P":["agent1","agent2","agent3" ] The description string is "This user-agent(s) will be required to use 2FA/MFA."
UserAgentHeaderSkipOTP string none 0 512 EFT will skip 2FA when a user agent header specified in this advanced property is encountered, so that admins can add additional headers to the list, which would allow for non-Globalscape controlled clients (such as Fiddler, FileZilla, etc.) to connect over HTTPS, but skip 2FA/MFA. If the value is found in any connecting http/s client in its user-agent header, than 2FA is skipped. If not present in the AP exclusion list or hard-coded exclusion list, then regardless of header, the additional factor will be required to complete authentication. See exclusions in the EFT help topic, "Enable Multifactor Authentication for the WTC."
UserDatabaseSynchronizationMode unit32_t 0 0 2

This registry setting along with the IgnoreZeroUsersResult setting determines how EFT handles the receipt of a zero user list when connecting to a LDAP/AD authentication server.

Possible values:

  • 0 - Normal behavior which is to drop all user/group associations.

  • 1 - Log auth provider synchronization to event log, but otherwise normal behavior.

  • 2 - Log auth provider synchronization and do not delete users.
UseRESTBeforeAPPE bool true none none ClientFTP settings transfer default transfer type; If true, ClientFTP first tries REST command to resume FTP upload, and then, If fails, tries APPE. CuteFTP help may contain more details.
UseSIZECommand bool true none none ClientFTP use SIZE command for smart overwrite.
UseSSLCertificate bool false none none ClientFTP client use SSL certificate
WaitForServerVersion bool false none none If set to 1 causes ClientFTP to wait for the receipt of the remote server's SSH version message before sending its own SSH version to the remove server.
WaitOnFileUploadEventCompletionBeforeSendingResult     n/a n/a Used to conserve legacy behavior: success reply is sent to client sent after the event rule kicked off by File Upload trigger has completed. See also RunningAsyncEventsLimit and QueuedAsyncEventsLimit to control the maximum size of the running rule thread pool.
WebServiceTimeout unit32_t 60 0 4294967295 This value sets the timeout period in seconds when Webservices is called via a browser.
WildCardFailMode bool false none none If set to one this value causes a "file not found" error to be generated by an event rule if using the *.* wildcard and no files were found, otherwise if nonexistent or 0 the default behavior is to not treat this as an error.
WorkspaceInviteExpirationPeriod Days unit32_t 5 0 4294967295 Specify the Workspace invitation expiration days. If not set = 5; if 0, same as Workspace link expiration.
WorkspacesCleanupPortionSize unit32_t 1000 4294967295 1 This value limits the number of workspaces cleaned up in a single pass so there is minimal EFT operational disruption.
WorkspacesCleanupRecurrence unit32_t 0 0 2

Determines the recurrence strategy for cleaning up workspaces:

  • 0 - by minute (default)

  • 1 - hourly

  • 2 - daily

WorkspacesSyncEmailLimittoTheseDomains string *.* 0 4096 Restricts option to query auth provider when searching for a user account by invitee's email with the following email domains. Default is *.*.
WSInviteFromAddrUseOwnerEmail unit32_t 0 0 4294967295

This override changes the sender for Workspace Messages

  • 0 - Recipient receives Workspace Invites from User and Secure Send from SMTP Server

  • 1 - Recipient receives Workspace Messages from the SMTP server

  • 2 - Recipient receives Workspace Messages from the User
WTCSendEmailTimeOutMin unit32_t 5 0 (disabled) 1440 (24 hours) This AP sets the timeout for sending email to the user. If the time between attempts is less than timeout value, then EFT will return 412 error. Set to 0 to disable the timeout.
WTCTimeOut unit32_t 5 0 4294967295 This value sets the timeout period in minutes for an idle WTC session.