© Copyright 2007-2011 Company Background Founded in 1994 - based in Nebraska Private company with no debt or outside funding Dedicated to Research and Development Focused on Data Automation and Security Responsive technical support; Toll-free, Email, Web IBM Advanced Business Partner Microsoft Gold Certified Business Partner Other Partnerships: Oracle, Sun, Novell, RedHat, Apple, VMware and PCI Security Standards Council Over 3,000 Customers Worldwide AAA Cooper Transportation GE Aviation PGA Tour Abbott Nutrition Henry Schein Inc Pizza Hut ADP Hitchcock Shoes RSC Equipment Rental Barclays ICE Services AB (Sweden) Scotiabank Boise Cascade Corp (Trucking) Integra Bank Service Insurance Group Boone County Government Iowa School for the Deaf SGBL Bank (Lebanon) Bristol Hospital John Deere Shop Vac Corporation KOA Campgrounds Sinclair Services Company Kwik Trip Smith & Wesson Lionel L.L.C. State of California - Developmental Services London Insurance Group Stratosphere Madison Square Garden Sungard Maines Paper & Food Service Toronto Dominion Bank Marlborough Stirling Canada Think Bank Mendota Insurance Company Unidad de Inversion Colpatria (Colombia) Minnesota State Lottery United Auto Insurance Monterey Mushrooms, Inc. United Rentals Inc. National Bank of Kuwait (Lebanon) Universal Orlando Nebraska State Patrol University of Arkansas Disneyland Resort New York Metropolitan Museum of Art Western Bank FBD Insurance (Ireland) NEXCOM Woolrich Inc First Hawaiian Bank Penson Financial Services Canada, Inc. Yamaha Motor Europe N.V. (Netherlands) Cabela's Centresoft (United Kingdom) Charles County Public Schools City of Owensboro City of Redding City of St. Petersburg Coachella Valley Water District Cooley Godward Kronish LLP COOMEVA (Colombia) Covidien Delta Dental Product Summary GoAnywhere Director™ is a managed file transfer solution that automates and secures the exchange of data with your customers, trading partners and enterprise servers. GoAnywhere Director connects to almost any server or data source using a wide variety of standard and secure protocols. GoAnywhere Services™ allows trading partners (e.g. customers, vendors, remote employees) to securely connect to your system and exchange files within a fully managed and audited solution. It includes the popular file transfer server protocols of FTP, FTPS, SFTP and HTTPS . GoAnywhere Gateway™ acts as an enhanced reverse proxy that provides an additional layer of network defense. It allows your trading partners to connect to GoAnywhere Services without having to open incoming ports into your private network or store sensitive information in the DMZ. Product Summary Product Diagram Benefits Automates data movement throughout the Enterprise Streamlines data transmissions with Trading Partners Eliminates: - Custom programming and scripts - Manual processes - PC file transfer tools - VANs and Dial-Ups Secures transmissions to comply with PCI DSS, HIPAA, HITECH, SOX and state privacy laws. Decreases transmission times through compression Supports concurrent large file transfers with auto-resume and integrity checks Provides centralized point-of-control and administration Includes detailed logging and message alerts Implements industry standards Security For compliance with FIPS, PCI-DSS, HIPAA, Sarbanes Oxley, GLBA and State Privacy Laws Secure Protocols • SFTP – FTP over SSH • FTPS – FTP over SSL/TLS • SCP – Secure Copy • HTTPS – HTTP over SSL • OpenPGP / GPG • ZIP with password protection • Encrypted email (SMIME) • AS2 AES encryption (key lengths of 128, 192, 256) – NIST standard Two Factor Authentication Key Management tools for OpenPGP Keys, SSL X.509 certificates and SSH Keys Role-based Administration SSL protected console Installation and Configuration Installs to AIX, HP-UX, IBM System i, IBM System p, IBM System z, Linux, Mac OS, Microsoft Windows, Sun Solaris and UNIX Customer installable – Less than 30 minutes typically Includes over 50 different business processes (Tasks) Project-based design allows “chaining” of multiple Tasks together Automate Projects with built-in scheduler Launch Projects from other platforms, applications and programming languages Server Connectivity (Resources) File Systems - Network Shares (SMB/CIFS) - Local File System FTP - Standard FTP - SFTP (FTP over SSH) - FTPS (FTP over SSL) - SCP (Secure Copy) Web Sites - HTTP - HTTPS (HTTP over SSL) - Web Services - AS2 Email - POP3 - IMAP - SMTP Database - DB2 - Oracle - Microsoft SQL Server - Sybase - MySQL - PostgreSQL - Informix Enterprise Messaging - Websphere MQ - SonicMQ - ActiveMQ Automated Transfers – Outgoing File System Database Convert Options - Excel - XML - Delimited (CSV) - Fixed Width Database FTP SFTP FTPS SCP - ZIP - GZIP - PGP Encrypt Email HTTP/s File System AS2 Automated Transfers – Incoming FTP SFTP FTPS SCP Email File System HTTP/s Options - UNZIP - GUNZIP - PGP Decrypt File System Convert - Excel - XML - Delimited (CSV) - Fixed Width Call Program or Script to Process Files Import Database GoAnywhere Administrator Browser based front-end for configuring GoAnwhere Projects Intuitive screens and wizards - AJAX enabled All definitions stored on server Graphical dashboard - Define Resources and Projects - Schedule and execute Projects - Monitor active Jobs - View Job Logs - Configure User Authority - View statistics Resource Setup Predefine Resources in GoAnywhere Administrator Each Resource has a unique name Only authorized administrators can maintain Resources Stored in GoAnywhere central database Use Resources from within Projects Projects and Tasks Project defines the Business Processes to perform Each Project contains one or more Modules Each Module contains one or more Tasks Project can contain variables that may be overridden at runtime Define Projects through graphical wizards or XML project name=“TestProject" mainModule=“Module B" version="1.0"> <variable name=“FileName" value=“employees.xls" /> <module name=“Module B"> <sql label=“Fetch from Database" resourceId="Production 400"> <query outputVariable="data"> <statement>select * from LNMXDEMO.EMP</statement> </query> </sql> <writeExcel label=“Convert to Excel" inputRowSetVariable="${data}" outputFile=“${FileName}" sheetName="Employees" includeHeadings="true"> <data trim="both"/> </writeExcel> </module> </project> Project Designer Define Projects through graphical interface Organize Projects under folders and control access rights to the folders Database Connect to DB2, Oracle, SQL Server, Sybase, MySQL, PostgreSQL and Informix Do not need to load additional software on database server - connects via JDBC 2.0 drivers Run any SQL statement supported by the database (e.g. Select, Insert, Update, Delete, Call, Create…) Example uses of SQL in GoAnywhere: - Import files (text, Excel, XML) into database tables - Export records from a database table into a file (text, Excel, XML) - Copy records between tables - Call stored procedures on a database server - Create and Alter tables FTP FTP command support - Get files - Put files - Delete files - Move files - Make Directory - Change Directory - Rename Directory - Execute Custom Commands Connection retry attempts with file auto-resume Auto-detect Binary and ASCII modes Include or Exclude files based on - Wildcards (i.e. “trans*.txt” or “*.xls”) - Date/time range - Size range Auto suffix or prefix file names with timestamps, values or variables Configurable ports Example of FTP Get: SFTP SFTP = FTP over SSH TERMS SSH 2.0 is latest standard SFTP encrypts the entire connection including data, users ids, passwords and commands Authenticate with a User id and • Password • Key • Password and Key (Dual Factor) Connection retry attempts with file auto-resume Wildcard file filters, auto prefix/suffix file names, etc. Configurable ports GoAnywhere SFTP Server SSH is an abbreviation for Secure Shell. SSH is both a computer program and an associated network protocol designed for encrypting communications between two untrusted hosts over a network. It utilizes Public keys to provide asymmetric cryptology. FTPS FTPS = FTP over SSL/TLS TERMS Encrypts entire connection including data, user ids, passwords and commands Explicit and Implicit FTPS are both supported Supports dual-factor authentication using a combination of certificates and user/passwords SSL is an abbreviation for Secure Sockets Layer. SSL is a security protocol for encrypting communications between two hosts over a network. SSL utilizes certificates to establish trust between the two hosts. TLS is the abbreviation for Transport Layer Security and is the successor to SSL. Certificates can be self-signed or signed by a certificate authority (CA) like Verisign Connection retry attempts with file auto-resume Wildcard file filters, auto prefix/suffix file names, etc. Configurable port ranges GoAnywhere FTPS Server Email Send email - Supports multiple To, CC and BCC addresses - Specify SMTP server, subject, message, reply to - Multiple attachments allowed - Support for international characters - SMIME support for encrypted emails Retrieve email - Filter incoming emails based on From, To, Subject and Message - Store attachments for further processing - Can retrieve email from POP-3 and IMAP servers - SSL support HTTP HTTP and HTTPS (SSL) Supports Cookies and HTTP Redirects Perform requests with Parameters HTTP Get - Download multiple files in one session - Filter files based on last modified date/time HTTP Post - Upload multiple files in one session Data Translation Read and Write popular data formats - Database - Excel - Fixed-Width text - Delimited text (CSV) - XML Can convert between formats. Examples: - Database to CSV - CSV to Excel - XML to Database XML Write Multiple sources (database, CSV, fixed-width, Excel) Create multi-level XML documents Header/Detail support Custom XML tag names and attribute names Format numbers and dates Specify null substitute values Data trim options Indention / whitespace formatting Schema or DTD validation XML Read Parse complex multi-level XML documents Schema or DTD validation Header/Detail support Data trim options Supports multiple date and number formats Skip invalid records XML data can be inserted into database tables XML data can be converted to other formats (i.e. Excel or CSV) Excel Write Supports Excel 95, 97, 2000(XP), 2003, 2007 and 2010 spreadsheets Support for Excel Templates Write to Multiple sheets Custom titles, page headers, column headings and page footers Control fonts, font sizes, colors, alignment, etc. (by sheet or column) Format dates and numbers using formatting options supported by Excel Append or Replace Excel Read Supports Excel 95, 97, 2000(XP), 2003, 2007 and 2010 spreadsheets Indicate the sheet name to read Specify the starting row number Specify column types/sizes Trim options Format options for dates/numbers Null substitute values Import into database or convert to another format (i.e. CSV or XML) Fixed Width and Delimited Read and write text documents Fixed-width and Delimited text (CSV) Supports multiple date and number formats Record delimiters (CR, LF, CR/LF, LF/CR) Text qualifiers Null substitute values Read - Data can be inserted into a database table - Data can be converted to other formats (i.e. Excel or XML) Write - Append or Replace - Specify type of delimiter (commas, tabs, pipes, etc.) - Include/exclude column headings ZIP Compression and Encryption Symmetric Form of Encryption – Password based Can encrypt and compress multiple files at once (packaging) Password protection: Standard, AES128, AES192 or AES256 Compresses typical data to 1/10th of original size Compatible with PKZIP, WinZip and other ZIP tools ZIP Compression and Encryption ZIP: UNZIP: OpenPGP Encryption Widely used for exchanging sensitive files over the internet. Uses combination of Asymmetric-key and Symmetric-key cryptology to provide high level of protection and speed Encrypt with Public Key -- Decrypt with Private Key (Secret Key) Encrypted files can be sent over standard FTP connections or Email Provides compression to reduce file sizes “A transfer can be defined in just five steps” TERMS OpenPGP standard is a non-proprietary and industry-accepted protocol which defines the standard format for encrypted messages, signatures and keys. This standard is managed by the IETF (Internet Engineering Task Force). Key Pair is a combination of a Private key and its corresponding Public key. Key Pairs are used within Asymmetric Cryptology systems, such as OpenPGP, SSH and SSL. Private Key is the portion of a Key Pair which is used by the owner to decrypt information and to encode digital signatures. The Private key, typically protected by a password, should be kept secret by the owner and NOT shared with trading partners. Also known as a Secret Key. Public Key is the portion of the Key Pair which is used to encrypt information bound for its owner and to verify signatures made by its owner. The owner’s Public key should be shared with its trading partners. OpenPGP Screen Examples OpenPGP Key Management GoAnywhere integrated OpenPGP key management Create, Change, Delete, Import and Export Keys OpenPGP Signatures A Digital Signature is used to authenticate the Sender Sign with Private Key Verify with Public Key TERMS Digital Signature is an electronic signature which is encoded into a document using the sender’s Private key. This signature can be authenticated by the recipient using the sender’s Public key. An authenticated signature will ensure the original content of the document has not been altered by an unauthorized party. OpenPGP Algorithms Asymmetric Key Types (Used to encrypt/decrypt the Symmetric Session Keys) Diffie-Hellman (recommended) DSA RSA Symmetric Ciphers (Used to encrypt/decrypt the message data) AES-128 AES-192 AES-256 (recommended) Blowfish CAST5 DES IDEA Triple DES Twofish Compression Algorithms (Used to compress the message data) ZIP ZLIB Desktop OpenPGP Crypto Studio - OpenPGP Key Management Installs to Windows, Mac and Linux Create, Change, Delete, Import and Export Keys Perform desktop-level encryption, signing, verification and decryption of documents Crypto Studio is also good for smaller Trading Partners Single license included with GoAnywhere Other Tasks Copy, Move, Rename and Delete Files Create Directories Timestamp Create and delete workspaces Call native programs and scripts on Windows, Linux, etc. Call IBM i (iSeries) programs and commands Module Conditioning and Dependencies Module dependencies Conditional execution of Modules Execute a module only if a particular condition is met Error Handling Define what should be done when a task errors out - Abort (default) Continue Set a value for a variable Call a specific module Error handling can be defined on a project, a module or a task Executing Projects Execute immediately or in Batch Place in GoAnywhere Scheduler Use existing Scheduler Execute from OS command line Execute from within your applications GoAnywhere Scheduler Flexible scheduling: - One Time - Minutely - Hourly - Daily - Weekly - Monthly Set login user and password, queue priorities, etc. Email notification (when fails and when successful) RUNPROJECT command Run projects in GoAnywhere using the RUNPROJECT command and APIs RUNPROJECT available for IBM i (iSeries), Windows, Linux and UNIX Requests sent to GoAnywhere over HTTP requests Override Variables Run interactive or batch Specify Job Queue priority Trap for errors The RUNPROJECT command and APIs are provided at no additional charge in GoAnywhere. RUNPROJECT example (CL) Monitor for message ids Any errors are placed in job log Retrieve any errors with RCVMSG command RUNPROJECT example (Windows) C:\> RunProject -server http://192.168.1.184:8000/goanywhere -user SFIELD -password ********* -project /Payroll/SendDirectDeposit -logFile C:\GoAnywhereLogs\MyLog.log filename “payrolldata.csv” Project Execution Flow Every execution of a Project is considered a “Job” Each Job is assigned its own Job Number and Job Log Starts in a Job Queue Can override Job Queue priority and Execution priority Multi-threading (to allow the concurrent execution of multiple projects) Monitor active Jobs (hold, release, cancel) Logging Global Log Job Log per execution of Project Log Level can be defined on a project, module or a task Log Level controls what should be logged: - SILENT - INFO - VERBOSE - DEBUG Search Completed Jobs - Date/time range - User - Project Name - Job Number - Status Example Job Log 1/21/08 1/21/08 1/21/08 1/21/08 9:38:07AM 9:38:07AM 9:38:07AM 9:38:07AM INFO INFO INFO INFO Start Date and Time: 1/21/08 9:38:07 AM Job Number: 1200325835858 Project Name: /Demo/DB to Excel to Zip and FTP Submitted By: administrator 1/21/08 1/21/08 1/21/08 1/21/08 9:38:07AM 9:38:07AM 9:38:08AM 9:38:08AM INFO INFO INFO INFO Executing task 'Retrieve Records‘ Executing statement select * from LIBRARY.EMP Query execution produced a rowset Finished task 'Retrieve Records‘ 1/21/08 9:38:08AM 1/21/08 9:38:09AM 1/21/08 9:38:09AM INFO INFO INFO Executing task 'Create Excel File‘ 8 record(s) were written Finished task 'Create Excel File' 1/21/08 1/21/08 1/21/08 1/21/08 9:38:09AM 9:38:09AM 9:38:09AM 9:38:09AM INFO INFO INFO INFO Executing task 'Create ZIP File‘ Compressing file '/files/employees.xls‘ Number of files compressed: 1 Finished task 'Create ZIP File‘ 1/21/08 1/21/08 1/21/08 1/21/08 1/21/08 1/21/08 1/21/08 1/21/08 1/21/08 9:38:09AM 9:38:09AM 9:38:10AM 9:38:10AM 9:38:10AM 9:38:12AM 9:38:12AM 9:38:12AM 9:38:12AM INFO INFO INFO INFO INFO INFO INFO INFO INFO Executing task 'FTP the ZIP File‘ Connecting to '192.168.1.2' at port '21' Executing sub-task 'put‘ Setting the data type to AUTO Uploading ‘/files/employees.zip’ 1 file(s) were uploaded successfully Finished sub-task 'put‘ Closed the FTP connection Finished task 'FTP the ZIP File' 1/21/08 9:38:12AM 1/21/08 9:38:12AM 1/21/08 9:38:12AM INFO INFO INFO Finished module 'main‘ Finished project 'DB to Excel to Zip and FTP‘ End Date and Time: 1/21/08 9:38:12 AM Security Authorized users must have valid user id and password Passwords can be authenticated against GoAnywhere database or System i Users can be organized into User Groups Roles can be assigned to Users and User Groups - Product Administrator - Security Officer - Resource Manager - Project Designer - Job Manager - User Authorize Resources Authorize Project Folders Advanced Thread-safe - Controls whether or not a project can be executed simultaneously Workspaces - Each execution of a project (or a job) can have its own workspace for storing temporary files Import Projects and Resources Promote Projects and Resources to other installations Diagram Overview Allows your trading partners and employees to securely connect to your organization and easily retrieve or upload files. Supports open transfer protocols of FTP, SFTP, FTPS, HTTP/s Can secure transmissions with SSL/TLS or SSH encryption Provides a pure web client for simple file transfers Includes event triggers based on user-defined conditions Generates detailed audit logs and alert messages Provides trading partner account wizards and permission controls Intuitive browser-based interface for administration and monitoring No programming or special skills needed Installs to Windows, Linux, IBM i (iSeries), IBM System p, HP-UX, Sun Solaris and UNIX Trading Partner Management Unlimited number of trading partners can be configured Grant individual permissions or adopt permissions from groups Restrict access based on the type of service (FTP, SFTP, FTPS, HTTP/s) Restrict access to certain functions (e.g. upload, download, delete, rename, etc.) Automatically send email with user id and password Web Client Allows your trading partners simple access to your system for exchanging files Authenticate using user-ids/passwords/certificates with granular permission controls Full audit trails and event triggers Choose between basic and enhanced (applet) interfaces Rebrand with your company logo Audit Logs Audit logs stored for every transaction (login, upload, download, rename, etc.) for all services Search using a wide variety of filter criteria View on-line or export to CSV Integration with GoAnywhere Director GoAnywhere Director can send/retrieve files to/from GoAnywhere Services GoAnywhere Services can call Projects in GoAnywhere Director based on triggers Triggers based on file upload, download, rename, etc. Pass parameters, such as user and file name Can run multiple triggers per event Introduction No incoming ports are opened into the private (internal) network No sensitive files are stored in the DMZ User credentials and permissions are maintained/stored in the private network Services configurations are maintained/stored in the private network Supports FTP/s, SFTP and HTTP/s file transfer protocols No special hardware components; software-only solution Installs to Windows, Linux, AIX, UNIX and Solaris operating systems How It Works GoAnywhere Installation Requirements Linux (32-bit and 64-bit): - Distributions - Disk space - Memory Red Hat, SUSE, Ubuntu (not inclusive) 150 MB 256 MB Windows (32-bit and 64-bit): - Operating System - Disk space - Memory Windows 2000, 2003, 2008, XP, Vista, 7 150 MB 256 MB IBM i (iSeries): - Operating System - Disk space requirements - Memory requirements - JRE V5R3 or higher 100 MB 256 MB 1.5 or later UNIX / AIX / Solaris / HP-UX: - Disk space requirements - Memory requirements - JRE 100 MB 256 MB 1.5 or later How to Contact Us Web site: E-mail: www.GoAnywhereMFT.com sales@linomasoftware.com Toll-free: Direct: Fax: 1-800-949-4696 (402) 944-4242 (402) 944-4243 Address: 1409 Silver Street Ashland, NE 68003 USA