Security Features

GoAnywhere Services™ provides enterprise-level security features to meet stringent in-house policies and compliance requirements such as PCI DSS, HIPAA, SOX and state privacy laws. Only authorized administrators are able to configure security settings and users in GoAnywhere Services, which is based on their assigned roles.

Security Features:

• Set password policies and expiration intervals
• Authenticate users with LDAP, Active Directory (AD), IBM i or database
• Filter connections with IP blacklists and whitelists (Global and User level)
• Administrative separation of duties
• Block Brute-Force and Denial of Service (DoS) attacks with an automatic IP blacklist
• Create and manage SSL certificates and SSH keys through integrated screens
• Authenticate SFTP connections with passwords and/or SSH keys
• Authenticate FTPS and HTTPS connections with passwords and/or SSL certificates
• Utilize only FIPS 140-2 certified encryption algorithms to meet U.S. Government (NIST) standards
• Authorize selected services (e.g. FTP, SFTP, FTPS, HTTPS and AS2) to certain users and groups
• Restrict users to specific home directories
• Specify granular permissions on each file and folder the user has access to
• Grant command permissions (upload, download, delete, rename, etc.) by users and group
• Ability to accept or reject files with certain extensions
• Run services under non-standard port numbers
• Disable user accounts after maximum login attempts
• Disable inactive user accounts automatically
• Receive instant notifications on login failures
• Disable anonymous login
• Full audit trails (with support for SYSLOG feeds) of all user and file activity
• View the active sessions for logged-in users with the ability to terminate (kick) sessions