By Erik Small -

Selecting a secure file transfer method can be a very critical component of your organization’s security policy — and even a requirement! Many different industries require compliance and regulations around how data is shared, transferred, uploaded, downloaded and stored from PCs to file servers.

This concise chart below provides a breakdown of the different secure file transfer methods available in most business-grade file transfer programs.
The WS_FTP Professional Security Guide provides more information around the different layers of security.

By Erik Small -

Ipswitch File Transfer launched a brand new file transfer product today – WS_FTP Server Ad Hoc Transfer Module.

This new module eliminates the need for email attachments which burden corporate email servers. IT managers can use WS_FTP Server Ad Hoc Transfer Module to enforce file sharing policies and have full visibility into the company’s file sharing activities.

Ipswitch’s website has been updated with all the details and features of the new module.

The simple benefits are summed up like this:

 1.Complete visibility into all file sharing activities
2.Proactively manage all file sharing interactions, both internal and external to the company, organization or domain
3.Enforce administrator defined policies and rules for sending files to other people
4.Remove the “file attachment” burden from the email server

By Erik Small -

A concise 2-minute overview of Ipswitch’s client + server secure file transfer relationship. This video describes old FTP processes, and how the environment has changed with encrypted transfers and stronger client to server security.

By Erik Small -

When in Multipart mode, WS_FTP splits large files into smaller segments and downloads all segments via different, yet concurrent, connections. This decreases the total download time for large individual files.

Check out the WS_FTP Tools Guide, page 7, for step-by-step instructions for setting up Multipart Mode

By Erik Small -

 Loading ...

By boo -

just how secure.. is your security?

I just figured I’d share with the group some recent data and security breach news stories from the last few days…does it ever end?

• Snooping through the Power Socket (BBC)
• Elance hit by Security Breach (TechCrunch)
• Someone Call Security (Twitter)
• Questions on Cloud Security (Network World)

By c-emmons -

 Loading ...

By c-emmons -

Nevada and Massachusetts have become the forerunners for data security recently.  With the current data security regulation (1.0), businesses are required to notify individuals if there is a potential personal information breach which could lead to identity theft.  This law is used mostly to set standards in responding to incidents but not in actually preventing them from occurring in the first place.  As many may remember, the reason for the regulation in the first place was due mainly to the data breach that companies such as TJX, ChoicePoint, DSW and BJ’s Wholesale suffered.  With TJX as their guinea pig, the Federal Trade Commission conducted a new wave of security referred to as Data Security Regulation 1.5.  This made higher standards for business security that penalized any data breaches.  However, it lacked an implementation of any technology to fight against this.  Which brings us to Data Security Regulation 2.0.

New laws in the states of Nevada and Mass are looking to set specific standards which include the use of encryption when collecting and transmitting hte personal information of its buyers. On October 1, 2008 the Nevada law was effective saying that information was not allowed to be transmitted other than via fax unless encrypted which is defined as “requiring the use of cryptographic keys to decipher data.”  Although Nevada is certainly a leader for security, it has nothing on the programs that Massachusetts is looking to install.  They are bearing down on all levels of companies and considering each to be on the level of banks and their need for information security.  Going much further than simply encrypting data, business must undergo operational requirements such as a developing a written information security program which must be approved by the standards of the Commonwealth of Massachusetts.  Encryption according to Mass is more narrowly defined as “the transformation of data through the use of algorithmic process, or an alternative method at least as secure, into a form which meaning cannot be assigned whithout the use of a confidential process or key.”  Due to the complexity of the law and complaints from business owners it will not be authorized until January 1st of 2010.  Businesses that store personal information in electronic or paper from must abide by these laws and any violations carry a heavy fee of $5000.

These new laws are just the beginning of information security practices.  It will be difficult to employ them, however, if all the standard vary state-to-state.  It is the best interest of the businesses everywhere to begin to implement security measures that comply with Massachusetts since it is the strictest.  Many enterprise leveled businesses and beyond have since begun to protect their name brand as well as their customer information by using ws_ftp and other file transfer products, which are in compliance with the law.   Until there is one standard law for all businesses, every company from McDonald’s to the local icecream store should start encrypting.

By Erik Small -

The sponsors of File Transfer Planet, Ipswitch, just announced a new Enterprise file transfer workflow engine,  MOVEit Central Enterprise 7.0. It’s for companies managing thousands of complex and logical data workflows. This is certainly several levels up from the basic file transfer processes that we regularly troubleshoot here at File Transfer Planet.

Here’s a link to the press release:

Ipswitch Delivers Advanced Business Logic and Virtualization In MOVEit Central Enterprise Workflow Engine