User Guide to Nuance Secure File Transfer (SFT)

Transcription

1 User Guide to Nuance Secure File Transfer (SFT) Policy 1. SFT accounts are assigned to an individual, not a department or group and should not be shared under any circumstances. It is the responsibility of each department or manager to notify Human Resources of an employee s departure from Nuance. Such notification will result in the immediate suspension of a departing employee s Windows and SFT accounts. 2. All users are assigned to at least one SFT group. Each group is assigned a folder for which there is a 10GB file limit. If the size of a transfer is larger than the limit, another means of file transfer must be used. 3. SFT users (Nuance employees and customers alike) have full rights to all folders and subfolders assigned to their group(s). 4. All files will be deleted 14 days from the day they are put on the SFT server. 5. IT will not, under any circumstances, create external/customer accounts. Only group admins have this privilege and are responsible for maintaining these accounts. 6. Only IT can add/remove Nuance employees to/from SFT groups. Adding Nuance employees with the use of external accounts is strictly prohibited and may result in restricted access or account revocation. 7. IT reserves the right to suspend or cancel any user s access to any portion or all of SFT services when IT determines that an account has been used inappropriately or illegally. Welcome to Nuance Communications, Inc. Secure File Transfer site. If you have not already done so, please contact your Nuance representative to create your account. If you are a Nuance employee, you may select the Request an account link from the page above. Once created, your account will provide limited access to a folder on the site to which you may upload up to 10GB of software and other electronic files, including invoices, documentation, presentations, and more. You will also be granted unlimited downloads of posted media. alerts confirming uploads, downloads, and newly available documents will be sent to the address you provided. Once you have received your login credentials, please navigate to If you are unable to open the login page, please check your browser settings the secure nature of the site requires that TLS 1.0 is enabled. In Internet Explorer navigate to Tools Internet Options Advanced (Tab) and place a check mark next to Use TLS 1.0 under the Security section. Click OK. You may have to restart your browser for the changes to take effect. If you are still unable to open the login page, please contact technical support. You will be presented with the following screen: Please enter your username and password and click the Sign On button. Please note that your password is casesensitive.

2 Nuance employees only: Your SFT username and password are the same as your Windows login. Once you have successfully logged in, you will be presented with the following page: Please start by installing the wizard: Click on the Install the Upload/Download Wizard (Java) link. Once installed, the screen will change to the following:

3 In the most common scenario, you will be a member of a single group. As a result, your upload/download wizard defaults to your group s assigned folder /Group Folders/Your Group s Folder and the Browse Other Folders link only allows you to browse to /Group Folders/Your Group s Folder. Select CLICK HERE to Launch the Upload/Download Wizard at the bottom of the page to start securely uploading files to your assigned space on the server: When you select Add File or Add Folder a standard file selection dialogue appears, please select the file or folder you wish to upload:

4 The selected file/folder will appear in the Upload/Download wizard: Click Next to make the following dialogue appear.

5 If you have selected multiple files you may choose to upload a single compressed (.zip) file, add notes, choose to be prompted for different file names at the time of upload, as well as close the wizard when the upload completes. If you did not check the Close Wizard when done checkbox, click OK to close the wizard. If you wish to download a file from the server, click the Folders link at the top left of any page, click Group Folders, and finally click on the name of the folder to which you have been assigned generally, you will only see one folder. You should see a screen similar to the example below.

6 Find the file you wish to download and click on its corresponding download link on the right the Upload/Download wizard appears: You may choose to Open, Save, Cancel, or to configure what action to take automatically when initiating downloads of this file-type. If you choose the latter option, be sure to check the Automatically open/save files like this from now on checkbox. Each time you download a file with the same extension from sft.nuance.com the action you configure here will be taken.

7 If you select Open the wizard will close and the file will open if you have the appropriate software installed (.doc or.docx files require Microsoft Word, etc.). If you choose Save you will be prompted to select a save-location. Follow the remaining prompts on the wizard to complete the download. Uploading and downloading files generates confirmation and notification s to all users in a given group, which includes information about its location, size, name and who uploaded or downloaded the file. A direct link is also provided. Packages The Packages feature allows you to send s with large attachments up to 5GB (approx. equivalent of a single-layer DVD). Recipients receive 2 s: The first contains a link to the file(s) on the second contains a temporary password to log in and download the file(s): Example of link

8 Example of password To send a large attachment, log into and click on the Packages link in the navigation menu at the top left of the page.

9 You will be presented with a menu similar in look and function to various services available online, including an Inbox, a Sent folder, and an Address Book. You can draft s/packages from a link at the bottom of the screen labeled Send a new package circled in red in the image below. When you click on the link circled above, an form is opened with familiar features such as To and Subject lines along with space for a note to recipients. Failure to fill out all of these lines will prevent the package from being sent. Under the Files section near the bottom of the form you can attach files by clicking the Browse button. You can add more than one attachment by clicking the Add another file link. Once you have selected all of the attachments you wish to attach, click the Upload button. A counter in the same section will display how much space has been used of the 5GB limit or warn you if the limit has been exceeded. Once you have checked all settings, click the Send button at the bottom of the form. Note: All packages expire/are deleted after 14 days.

10

11 Command-Line Interface Beyond the HTTPS/web interface, SFT can be accessed using the sftp protocol (Secure File Transfer Protocol/SSH) and the ftps protocol (File Transfer Protocol Secure/SSL) using the following clients. No other clients are currently supported. Only sftp/ssh supports private keys: Supported Web Browsers MOVEit DMZ has been tested against and fully supports the following major browsers: Internet Explorer version 6.0 and higher must enable TLS 1.0 o Internet Explorer 7.0 and higher preferred o when using MOVEit Upload/Download Wizard (ActiveX or Java) FireFox (2.0, 3.0, 3.5+) must enable TLS 1.0 o when using MOVEit Upload/Download Wizard (Java - Windows/*nix/Mac OS X) Google Chrome (versions 2.0 and 3.0) must enable TLS 1.0 o when using MOVEit Upload/Download Wizard (Java - Windows/*nix/Mac OS X) Safari (versions 2, 3, and 4) under Macintosh OS X must enable TLS 1.0 o when using MOVEit Upload/Download Wizard (Java Only) = Indicates this client ensures the integrity of transferred files and proves who uploaded and who downloaded a specific file (non-repudiation). Use of the MOVEit Java Wizard on the Macintosh version of Firefox requires that you use the Java Preferences applet to select Java 1.5 (rather than 1.4.2). Supported Secure FTP/SSL Clients MOVEit DMZ has been tested against and fully supports a large number of secure FTP clients using FTP over SSL: MOVEit Freely (free command-line) MOVEit Buddy (GUI) MOVEit Central (w/admin) WS_FTP Professional and WS_FTP Home (GUI, version 7 and higher, Windows) ( version 12 and higher) SmartFTP (GUI, version 1.6 and higher, Windows) SmartFTP (free GUI, version 1.0 and higher, Windows) Cute FTP Pro (GUI, version 1.0 and higher, Windows) BitKinex (GUI, version 2.5 and higher, Windows) Glub FTP (GUI, Java 2.0 and higher) FlashFXP (GUI, version 3.0 and higher) IP*Works SSL (API, Windows, version 5.0) LFTP (free command-line, Linux, Unix, Solaris, AIX, etc.) NetKit (command-line, Linux, Unix, Solaris, etc.) SurgeFTP (command-line, FreeBSD, Linux, Macintosh, Windows, Solaris) C-Kermit (command-line; v8.0+, AIX, VMS, Linux, Unix, Solaris) AS/400 native FTPS client (OS/400 minicomputer) z/os Secure Sockets FTP client (z/os mainframe) TrailBlaxer ZMOD (OS/400 minicomputer) NetFinder (GUI, Apple) Sterling Commerce (batch, various)

12 Tumbleweed SecureTransport (4.2+ on Windows, batch, various) Cleo Lexicom (batch, various) btrade TDAccess (batch, AIX, AS/400, HP-UX, Linux, MVS, Solaris, Windows) curl (command-line, AIX, HP-UX, Linux, QNX, Windows, AmigaOS, BeOS, Solaris, BSD and more) South River Technologies "WebDrive" (Windows "drive letter" - requires "passive, implicit and 'PROT P'" options) Stairways Software Pty Ltd. "Interarchy" (Mac "local drive" and GUI ) FTP Client Developers: Please consult the "FTP - Interoperability - Integrity Check How-To" documentation for information about how to support integrity checks with your FTP client too. Supported Secure FTP/SSH (and SCP2) Clients MOVEit DMZ has been tested against and fully supports the most popular secure FTP clients using FTP over SSH as well: OpenSSH sftp for *nix (free command-line, Unix - including Linux and BSD, password and client key modes) OpenSSH for Windows (free command-line, Windows, password and client key modes) OpenSSH sftp for Mac (preinstalled command-line, Mac, password and client key modes) OpenSSH sftp for z/os (part of "IBM Ported Tools for z/os", z/os 1.4+, password and client key modes) Putty PSFTP, (command-line, Windows, password and client key modes) WS_FTP (GUI, Windows, version 7.0 and higher; version 7.62 has a compression-related bug which prevents it from uploading large, highly compressible files) BitKinex (GUI, version 2.5 and higher, Windows) F-Secure SSH (command-line, Client for Unix, password and client key modes) FileZilla (GUI, Windows) SSH Communications SSH Secure Shell FTP (GUI, Windows, password and client key modes; requires setting # of transfers to 1) SSH Tectia Connector (Windows) SSH Tectia Client (Windows,AIX,HP-UX,Linux,Solaris) J2SSH (free Java class - requires Java 1.3+) Net::SFTP - Net::SSH::Perl (free Perl module for Unix) MacSSH (GUI, Mac, password mode only) Fugu (free GUI, Mac, password mode only) Cyberduck (free GUI, Mac, password and client key modes) Rbrowser (GUI, Mac, password mode only) Transmit2 (GUI, Mac, password and client key modes) gftp (GUI, Linux, password and client key modes) Magnetk LLC sftpdrive (Windows "drive letter", password mode only) South River Technologies "WebDrive" (Windows "drive letter", password mode only) Cyclone Commerce Interchange (Solaris, client key mode only) Stairways Software Pty Ltd. "Interarchy" (Mac "local drive" and GUI, password mode only) Miklos Szeredi's "SSH FileSystem", a.k.a. "SSHFS" (*nix "mount file system" utility, password and client key modes; requires OpenSSH and FUSE) Tumbleweed SecureTransport (4.2+ on Windows, batch, various) Note: Two of the clients above, (OpenSSH for Windows & SSH Communications), are capable of uploading files using multiple independent threads which may send blocks of data non-sequentially. This mode is not supported by MOVEit DMZ SSH and should be disabled using the "-R1" command-line option. In addition to the SFTP clients listed above, MOVEit DMZ has limited support for some SCP clients. This list of clients is limited to those that implement the SCP2 protocol, which uses SFTP as its underlying transfer mechanism. MOVEit DMZ has been successfully tested with these SCP clients:

13 PSCP, (command-line, Windows, password and client key modes) F-Secure SCP2 (command-line, Client for Unix, password and client key modes) WinSCP (command-line; SFTP mode) = Indicates this client ensures the integrity of transferred files and proves who uploaded and who downloaded a specific file (non-repudiation).