Overview

What good is an encrypted data transfer if the information it protects still falls into the wrong hands? SFTP security is best known for its ability to encrypt data in transit. But while data-in-motion encryption can secure confidential information as it traverses the network, encryption can't prevent an impostor from carrying out the download himself. For that purpose, you'll want your users to authenticate with the correct password and SFTP key.

In this post, we'll talk about the role of SFTP keys (a.k.a. private keys) in the overall security of the SFTP protocol, how it works, where to use it, and other bits of information regarding this important element of SFTP.

Overview: SFTP Command Line

Although GUI SFTP file transfer clients are more intuitive to use, some people still prefer to use SFTP through the command line. That's understandable. If you're already familiar with all the commands you need, a command line interface can be so much faster and powerful than any GUI-based counterpart. In this post, we're going to introduce you to the SFTP command line and show you how it can be quite a handy tool as long as you're willing to roll up your sleeves and get dirty.

Overview

OpenPGP encryption is an excellent way of securing sensitive files on a server. Even if the server is compromised, the information in those files can remain secret. On JSCAPE MFT Server, PGP encryption can be made to execute automatically. You can configure the server so that, as soon as a file is uploaded, the server will immediately encrypt it.

Overview: What is an SSL File Transfer?

SSL file transfer is a term sometimes used in referring to a secure file transfer protocol known as FTPS or FTP-SSL. FTP is a network protocol used for transferring files, while SSL is a protocol for encrypting information sent over a network. This post is meant to help users understand what FTPS is and what it is capable of doing, particularly in terms of enhancing the security of your file transfers. We can also show and tell when you request a free trial.

JSCAPE is pleased to announce the release of JSCAPE MFT Gateway 3.0.  This release is a major upgrade from previous versions adding several improvements to the clustering module, support for additional protocols, caching of HTTP/S content, and the ability to reverse proxy services without opening any inbound ports to your internal networks.

Overview

Web SSO support comes to JSCAPE MFT Server in the form of two widely accepted standards: OpenID and SAML. Earlier this month, we already talked about SAML. So now it's time to get acquainted with OpenID.

Overview: What is SAML?

Since version 8.8, JSCAPE MFT Server (now at v9.1) has already supported SAML Web SSO. Although we introduced SSO and its benefits in previous posts, we never went into the details of specific Web SSO standards like SAML and OpenID (another supported Web SSO). But in order to take advantage of any of our Web single sign-on features, you'll need to have at least some basic understanding of each of these two standards. Today, you can start with SAML or Security Assertion Markup Language.

Overview

There was a time when the average computer user had to enter login credentials only once per day - likely to simply gain access into the Windows environment. But in this cloud-computing/mobile device age, unless you've activated the "stay signed in" option (assuming it's available), you'd probably have to login to 5 or even 20 different Web sites or online applications per day.

In Part 1 and Part 2 of this series we focused on the basics of PCI DSS. Now that you've become familiar with the general requirements for achieving PCI DSS compliance, your next step would be to scout for solutions that would help you meet them. In that regard, allow us to present JSCAPE MFT Server and JSCAPE MFT Gateway, two products that already have the necessary features to meet practically all technical requirements specified in PCI DSS that affect file transfer systems.

Introduction

In Guide to PCI DSS Compliant File Transfers - Part 1 you gained a basic understanding of PCI DSS, the data it is intended to protect and how to assess the scope of a PCI compliant implementation.