Governed File Transfer Suite
What’s your file transfer strategy? Governed information exchange keeps your company in the lead.
In today’s e-business environment, there is a growing demand for secure and managed file transfers with third parties that are outside of the enterprise—including customers, partners, and subcontractors. As organizations understand the need to share proprietary, confidential information with outside parties, they must consider several key challenges:
- How to centralize management and provide complete visibility of all file transfer activity—regardless of the protocol being used and/or the type of transfer.
- How to provide secure connectivity to outside parties while minimizing IT overhead for each new connection.
- How to address threats to managed file transfers, connectivity security, and preventing sensitive information leakage.
Expand Business Needs
Whether it's a pharmaceutical company’s Chief Risk Officer sharing clinical trial information with hundreds of doctors, or a worldwide commercial bank transferring ACH and ACT financial transaction files between different financial organizations on an hourly basis, enterprises have identified several goals for their Managed File Transfer (MFT) or external file sharing capabilities:
- Replace FTP and homegrown file-transfer processes which are unsecured and suffer from high total cost of ownership.
- Allow the automation of file-transfer operations that are currently operated manually using disks, couriers, USB flash drives, which are expensive and vulnerable to security breaches.
- Provide secure "ad-hoc" solutions that enable users to send large files to outside parties, without relying on email servers to handle large attachments.
- Enable online secure file sharing with outside parties, with 24x7 global access to sensitive documents, such as HR, Legal, Marketing, Finance, and Board of Directors.
What is the GFT Suite?
Cyber-Ark's Governed File Transfer (GFT) Suite provides a secure, centralized platform for governing and managing business file-transfer needs. Banks, insurance companies, and other financial institutions, as well as telecommunications, pharmaceutical, and government agencies use the GFT Suite to exchange sensitive information with outside parties quickly and securely.
A single platform supports all aspects of secure file transfer:
- Centralize management and governance over all transfer processes, whether internal, external, automated manual or ad-hoc
- Enable, support and improve business processes and SLAs; the GFT Suite streamlines your business processes utilizing high performance transfer with 24X7 accessibility
- Reduce risk of disclosing sensitive information; the GFT Suite provides the highest levels of security, confidentiality, and authenticity
- Enable easy and seamless integration with enterprise infrastructure and legacy systems
- Reduce operational costs and simplify relationships and communication across the business community while minimizing IT overhead
The GFT Suite is built on Cyber-Ark’s patented Inter-Business Vault™ (IBV), the world’s most innovative enterprise-wide solution for governing and managing business file transfers.
Expand Inter-Business Vault
Enterprises around the world use IBV to exchange financial transactions, manufacturing designs, drug-trial data, legal documents, and other sensitive information. IBV ensures business continuity, because files will be delivered on time—and in a highly secure manner:
- Simple, secure communications. IBV stands out for its simplicity, ease of use, and efficiency. IBV provides a highly secure, ICSA-validated platform for sharing and transferring sensitive information to your external partners, vendors, and customers.
- Comply with regulatory requirements. With complete logging and tracking of all document accesses, as well as ensuring sensitive information is encrypted and protected both in transit and at rest, IBV provides a regulation-compliant infrastructure for external transfer of sensitive information over the Internet.
- Easy one-to-many and many-to-many connectivity. IBV provides an easy-to-use, easy-to- manage method to connect your people and applications to partners, customers, and vendors. The intuitive web interface and proprietary connector technology scale easily as your trusted community expands.
- Increased productivity. Users of IBV can easily access, upload, and transfer any type of highly sensitive information with the click of a button—without having to manage and configure complex tools or learn new behaviors.
- Guaranteed long-term availability of information. IBV provides a secure, long-term repository of sensitive information, with a record of all accesses, uses, and modifications of the data. Optional High Availability and full Disaster Recover features provide added assurance that information will always be available.
- Cost-effective, secure infrastructure. IBV provides a single secure infrastructure platform for the full range of file transfer and highly sensitive information sharing requirements between you and your partners, customers, and vendors. You don’t need to install and manage multiple secure connections to your network.
Cyber-Ark GFT Suite: components and features
Cyber-Ark’s patented Digital Vault Technology creates a centralized point for enterprises to implement exceptional security, streamline updates, enhance maintenance, and ensure compliance with regulatory and security practices—across all types of sensitive data. The GFT Suite comprises three integrated core products which can also be purchased separately as needed:
- Inter-Business Vault® for Automated MFT
- Inter-Business Vault® for Ad-hoc MFT
- Inter-Business Vault® for Collaborative MFT
Because all three products share a common server platform, the GFT Suite can be quickly and easily expanded to address any audit or security challenges that may arise in the future.
Expand Features
Managed File Transfer (MFT)
- Large (Multi-Gigabyte) file support; transfer recovery; automated resume; and transparent compression
- Powerful file-transfer rules engine with pre/post-processing capabilities
- Customizable alerts for failed transfers and broken processes
- Email notifications for new files
- File-level tracking and versioning
- Data integrity checking
Administration
- Central management of all data exchange and sharing processes:
- Support for end-to-end automation and interactive collaboration
- Centralized management for third-party users and access control
- Trading partner management:
- Delegated administration
- One-click enrollment
- Service-based access control settings
- Authentication: SSO, LDAP, Radius
Security and Governance
- Patented Vaulting Technology® integrates features with procedures:
- Tamper-proof audit logs
- Data encryption at rest and in transit
- Strong authentication including 2-factor, OTP, LDAP etc.
- Transparent encryption keys management
- Segregation of duties; access control
Cyber-Ark GFT Suite: specifications
Encryption algorithms
- AES-256, RSA-2048
- HSM Integration
- FIPS 140-2 validated cryptography
Enterprise integration
- Clustering Support
- Disaster recovery solution
- Integration with enterprise backup system
- LDAP directories
- Identity and Access Management
Authentication methods
- Username and Password
- RSA SecurID
- Web SSO
- RADIUS
- PKI and smartcards
- LDAP
- Windows-based authentication
Monitoring
- SIEM tool
- SNMP traps
- Email notifications
