JSCAPE, the leader in platform and protocol independent managed file transfer solutions, is pleased to announce the latest release of MFT Server, 11.2.

Most cloud adopters are starting to discover the benefits of a multi-cloud strategy. These businesses have learned that, in many cases, multi-cloud is better in many aspects, like improving business continuity/disaster recovery, reducing (cloud) vendor dependency, improving interoperability with trading partners, and enabling organizations to leverage each cloud provider's strengths. But did you know the right managed file transfer solution can further streamline your multi-cloud infrastructure?

For today’s MFT security tip, let’s talk about replacing default admin passwords. Most software applications come with default admin passwords. You normally use it to gain initial access to the application right after installation. The problem with these default passwords is that, some of them are well known, that they often find their way into hacking forums in the dark web.

In this tutorial, you’ll learn how to configure JSCAPE MFT Server so that files uploaded to it are streamed directly to Google Cloud Storage. This streaming process is completely transparent to end users, who'll interact with the Google Storage folder as if it were a local folder on the server.

For today’s security tip, we talk about data-at-rest encryption. When your users upload files to your file transfer server, those files are usually stored in plaintext. The risk there is that, if an attacker somehow gains unauthorized access to that server, he or she could simply grab those files and then view their contents.

Overview

In order to keep transactions secure, you and your trading partners likely use SFTP and other encrypted protocols for your automated data exchanges. In this post, I'd like to share a method that can reduce the steps you typically take in applying SFTP automation to certain business processes. Here, you'll learn how to gather remote host credentials into a single entity, which you can later on reuse every time you need to construct another automated process.

In today’s security tip, we talk about including uppercase and lowercase characters in passwords. This is related to our previous video about using long passwords. Aside from using long passwords, you can further increase the number of possible password combinations by requiring your users to include uppercase AND lowercase characters.

Play this if you want to watch the video version

By default, JSCAPE MFT Server records domain logs in log files. While in most cases, this will do, some organizations prefer to record their logs in a database. In this article, we talk about the pros and cons of file-based and database-based logging and how to record files in a database in JSCAPE MFT Server.

It’s time for another MFT Security tip. Today, let’s talk about long passwords and why you would want to require your users to use them. To begin, let’s have a thought experiment. Let’s say, the alphabet only consists of two letters - A and B. Of course, we know there are 26 letters all in all, but for the purpose of this discussion, let’s just say there are only two.

Overview

In this post, we'll discuss the algorithms in a typical SFTP server and explain their basic functions. We'll cover algorithms for key exchanges, ciphers, MACs, and compressions. After that, we'll dive into the JSCAPE MFT Server Manager Web GUI and show you where you can configure those SFTP algorithms.

Having a basic understanding of these algorithms and knowing where to configure them will enable you to strengthen your SFTP server's security or troubleshoot certain client connection issues.

Note: SFTP runs on SSH, and the algorithms you'll be setting are actually SSH algorithms.