Sizeable transfers require lengthy periods. Extra time and resources spent on developing and trials when additional request has occurred.

Transcription

1

2 File transfer has been used for a long time and will be used continuously in the future. "80 percent of data exchange today is accomplished through movement of files. (Gartner, Inc. Research) FTP is free, But insufficient "Numerous factors cause companies to re-examine how they manage the movement of information from system to system, partner to partner, and person to person. FTP alone isn't a viable option to give the insight, security, performance, and ultimately, the risk mitigation necessary to responsibly conduct business. (Gartner, Inc. Research) FTP Environment Difficult to get a grasp of situations, errors, and the results of incoming/outgoing transfers. Absence of management method for incoming/outgoing files which are decentralized based on tasks. Prone to unauthorized access. Risk of Packet-Sniffing when transferring files via FTP Security Sizeable transfers require lengthy periods. Extra time and resources spent on developing and trials when additional request has occurred. Performance Manual work required whenever transfer errors appear due to increase in network instability. Lack of file integrity verification feature for files counterfeited/corrupted during transfer Reliability Hard to integrate tasks over different types of systems. Difficulty in following up with another task after completing one. Integration What is MFT(Managed File Transfer)? - Main solution for replacement of FTP - Secure file transfer - Assurance of re-transfer by automatic restoration of error - Encrypt for secure transfer - Compression for transfer improvement - Center-concentrated monitoring and logging - Realization of automation through integration with application s task process MFT FTP

3 It is time to make the change! FTP is not secure and is cumbersome to manage. MFT is an ideal FTP alternative. What are the advantages of MFT instead of an FTP? Take a look at the feature comparison below between the features in MFT versus FTP. Feature MFT FTP Get delivery confirmation Yes No Encryption transfer Yes No Audit tracking Yes No Remote file deletion/expiry Yes No Role based access to file transfers Yes No Users can manage contacts and file transfers Yes No Central visibility & management Yes No What is? As usage of cloud environment and mobile devices are increasing, the importance of the security and safety during data transfer is becoming even greater. is MFT solution with reinforced security and management features and is widely used by majority of korean banks while having its performance and reliability proven. Real-time monitoring and logging View statistics and output Excels Manage client registration Check errors and make notifications Manage user privileges by user groups Performance Security Concurrent File compression and parallel transfer Schedule transfers Immediate transfer after auto-detection Efficient use of network and H/W resources On top of DES, TDES, AES, RSA and DSS, various encryption algorithms are provided Digital certificate, secured transfer Specify client IP / port Access restricted via ID/PWD authentication Integration Reliability Integration with legacy system by execution of next tasks C, Java API provided Customizable to individual customers Active-standby failover configuration supported Auto-recovery & retransfer upon failure Continue transfer from where you left off Check for signature conformity

4 s distinct strengths from other MFT solutions Pure Java Developed Parallel Transfer Resource Efficiency Integrity Customization Low Cost Pure Java Developed is a pure Java-based Solution. (JRE 1.5 and above) It can operate on any platform with JVM installed. Parallel Transfer Improved problems in serial transfer method by a single process Supports parallel transfer of multiple files via the multi-thread method, for high-performance transfers Resource Efficiency Maximize efficiency of network bandwidth and hardware resource usage with faster file transfers than the socket programming transfer method Integrity Assuring integrity with conformity check through signature method. Customization Customization based on customer s needs without additional cost Low Cost Highly efficient, low-cost system implementation and operation cuts down on TCO (Total Cost of Ownership)

5 Solution Diagram Admin UI program - which can manage and monitor server. server -being the center of file transfer. -Set-up information and privilege information needed for file transfer are saved in data base. -Results of file transfer are saved in data base. 3 programs taking client s roles. -The client which is ran in Daemon form that manages scheduled tasks. -The client that operates with shell script at Command line -The client that we can use as FileZilla Admin Server s ADMIN Server DB File GATOR Server Outgoing Incoming (Automated) Admin UI Data Compression Privilege Encryption Transfer History Code Scheduling SFTP Connection Job Scheduler NIO Framework JRE (Java Runtime Environment) FTP s Security Function Encrypted Transfers - Hybrid method of mixing public key and private key methods. - Symmetric keys used for faster data encryption - Symmetric keys are encrypted into asymmetric keys for convenient key management Server Asymmetric Key Private Key Private Key Server Asymmetric Key Public Key Public Key (Server s) Public Key Public Key ( s) Symmetric Key Symmetric Key (Encyrpted with Server s Public Key) Symmetric Key Data Encrypted with Symmetric Key Encrypted Data Data Decrypted with Symmetric Key

6 is an outstanding solution in management aspect with it s functions. Privilege - Reinforce security of the system via s own privilege management system, rather than the OS s. - Registering info on user groups to set privileges for each group. - When adding clients, placing them under user groups will inherit the readymade privileges for that group. Limit Access - Reinforce access control by configuring the authorization of IP addresses. Scheduling transfers and setting priorities - Can schedule transfers at particular dates and times - Can set priorities of transfer according to patterns of file name. - Can set number of parallel threads of concurrent execution. Scheduling transfers and setting priorities - Automatically retransfers upon file transfer error. - Connect to designated Failover server when the first server is not connectible. (Active-Standby for High availability Server) - Reactivation when active process is down Auto-recovery - Automatically retries transfer if it fails from network/system errors. - Maximizing efficiency of massive data transfer by retransfering from the point where it left off. - Overwrite / Append identical files. Real-time Monitoring - Real-time monitoring is provided for Transfer log and Access log Transfer Log - View daily, weekly or monthly and more based on periodical setting. - Save or print out log info text or Excel files - View errors of file upload/record of download transmission. Reporting Transfer Statistics - -specific info on transfers, uploads, downloads, transfer failures, etc. - -specific info on the number of Bytes of transfers, uploads, downloads, etc Access - View daily, weekly or monthly and others based on periodical setting. - Save or print out log info text or Excel files - View command execution log Schedule - Server scheduling feature supports scheduling of file transfers - scheduling feature supports scheduling of file transfers. <Admin program sample > Real-time monitoring

7 Case Study A Card Company in Korea Connect the Card Data to Internal Data and Partners External Systems If it sends file transferring event at server through C API at card Batch server, server gets to transfer files to client in Daemon form which is installed at outside agency. Billing Enterprises Card Batch Server C API FEP Server NAS Exclusive Line Card Companies DW Server Web Admin File Transfer Server F/W VPN Case Study B Finance Group in Korea Financial Holding Synergy Box Business Utilization and management system of customer information between affiliates server is installed at Hana Finance Group and at each Affiliates, client in Daemon form is installed. information Data is executed in server as scheduled transfer form. Bank Companies Card Companies Stocks Companies Server Exclusive Line Insurance Companies Web Admin F/W VPN Capital Companies

8 RM 1329, Rosedale Bldg., 724, Suseo-Dong, Gangnam-Gu, Seoul, Korea Tel : HomePage : Copyright 2013 sennet.co.kr All right reserved