Introduction

In SFTPPlus version 5.4.0 we have introduced support for Purview labels.

Using Microsoft Purview's label security feature can help improve the security of a legacy FTP server by extending data classification and protection controls to files that move through or are stored on that server.

Persistent Data Protection with Sensitivity Labels

Microsoft Purview allows you to apply sensitivity labels to files (like Excel, Word, PDFs, etc.), which persist with the file itself - regardless of where it's stored or moved.

Why this helps your SFTPPlus MFT FTP server:

  • Even if the legacy FTP protocol itself lacks modern security controls, by integrating with Purview, files transferred using SFTPPlus can have extra security policies applied based on their labels.
  • SFTPPlus can forward the files to other Office 365 services and by preserving the labels, the access to the files can be protected using the Purview rules.

Visibility and Compliance Tracking

SFTPPlus MFT servers provide extensive access auditing and activity logs which helps you in monitoring the activity of your FTP server.

Microsoft Purview can track and audit label usage and access attempts across environments.

Why this helps:

  • You get insight into how sensitive files are accessed after they've been uploaded/downloaded via FTP.
  • Helps with compliance and forensic investigations if there's a breach.

Augmenting Security Without Replacing Infrastructure

Instead of removing your legacy FTP setup, together with all the existing systems that interact with the FTP server, you can augment its security through end-to-end encryption at rest protection.

For example, files labeled as “Confidential” will be encrypted and can only be opened by users in your company - even if downloaded via anonymous FTP.

With SFTPPlus MFT, it's not required to apply the labels before uploading files to the FTP server. SFTPPlus can automatically apply labels based on the directory to which the files are uploaded.

Users accessing files from the FTP server must have software (like Microsoft 365 apps or Azure RMS) that can interpret the labels.

Summary

Using Microsoft Purview label security on files handled by a legacy FTP server adds data-level encryption and access controls and helps ensure compliance and tracking.

With SFTPPlus you can improve the security of your file transfers without changing the legacy systems.

At ProAtria we can help integrate your FTP file transfers with an existing or a new Purview deployment.

If you need support for integrating your file transfers with Purview, get in touch with us.