This article can also be found in the Premium Editorial Download "Information Security magazine: Security researchers on biometrics, insider threats, encryption and virtualization."
Download it now to read this article plus other related content.
Data has to move. Whether you are in manufacturing, financial services, entertainment, government, health care, pharmaceuticals -- whatever your business -- moving files, often big files, to and from departments, business units, partners, customers, etc., is at the heart of your operation.
Every organization has some way of getting files from place to place, person to person. It may be FTP or VPN, probably a home-grown solution using batch scripts, maybe with some file encryption and/or digital signing for some security. That gets you from point A to point B, but where's the audit trail? Where's the accountability? How do you know the files got where they needed to go and to the right people, or if they were even sent?
And how do you manage secure transmission and exchange all this data while keeping operational costs down?
Managed file transfer (MFT) software and products have grown into a $500 million-a-year business to meet the increasing security, compliance and operational demands of moving information.
"It's never just been an issue of security, although security is one of those low-hanging fruits that gets everyone's attention," says Gartner research director L. Frank Kenney. "More companies are affected by a failing audit and the fear of failing audits.
"The bigger issue is can I be assured, can I show, that a file that moves from point A to B has been secured, that the person who sent it had the authority to send it
- Server for management of all aspects of file transfer--communications channels, multiple protocols, workflow, provisioning, APIs, etc.
- Client for tight server integration.
- Proxy to conceal IP address and ports.
- Plug-ins to integrate with applications.
"Ad hoc file transfer is an important trend," says John Thielens, VP of technology for Tumbleweed, now part of Axway. "You think of managed file transfer as something scripted or for techies, but there's also file transfer technology for human-to-human collaboration -- Web conferencing, IM, email."
Enterprises buying into this market are typically looking to replace home-grown solutions and/or standardize on one product across the enterprise.
"Most places have home-grown solutions," says Gartner's Kenney. "It's not greenfield; just about everyone has leveraged FTP."
"If you roll your own, the cost is very high," says Proginet CEO Sandy Weil. "And, you don't have a consistent way to manage security around file transfers."
This was first published in November 2008