Articles published in - SFTPPlus MFT

2018-05-28security release

SFTPPlus Release 3.34.0

We are pleased to announce the latest release of SFTPPlus version 3.34.0.

2018-05-03security

Secure cipher suites for the ssl_cipher_list configuration

With the release of SFTPPlus 3.32.0, we have changed the default set of SSL cipher suites for the Local Manager and the HTTPS service. As with any product that runs in many environments, SFTPPlus uses a default set of SSL- related parameters that are a compromise between security and compatibility. Up to SFTPPlus version 3.31.0, we were using this highly compatible, but still reasonably secure, default set:

2018-04-26security-advisory

Security Advisory for SFTPPlus 3.33.0

A security advisory was created for SFTPPlus version 3.33.0 affecting Cross-Site Scripting Attacks for HTTP and HTTPS pages accessed via a web browser.

2018-04-24security

Security Advisory on CSRF and XSS attacks affecting HTTP/HTTPS services

The SFTPPlus version 3.33.0 release is a major security update for the HTTP/HTTPS file transfer service and the SFTPPlus Local Manager service.

2018-04-23security release

SFTPPlus Release 3.33.0 now supports IPv6 server-side functionalities

We are pleased to announce the latest release of SFTPPlus version 3.33.0.

2018-04-19resource security

Data Loss Prevention - Systems, Software and Strategies

Data Loss Prevention (or DLP for short) is the application of technology and policies in order to detect and prevent potential data breaches and data ex- filtration. Data that is of particular interest includes sensitive emails, documents and other information leaving the organizational boundary. Data Loss Prevention is one out of many options used in today's arsenal of defense against threats and attacks, and also a layer to harden overall data security.

2018-04-16australia compliance privacy

SFTPPlus and its relevance with the OIAC Privacy Act and ASD ISM

In this post, we outline two main compliance obligations relevant to Australia - the OIAC Privacy Act and the ASD ISM. For those familiar with other international compliance obligations, such as the GPG13 (Good Practice Guide) provided by the UK or HIPAA (Health Insurance Portability and Accountability Act) provided by the US, they will find the following information useful, especially when handling data and subsequent file transfers with Australian customers.