Specify Location of FTP.CFG

GlobalSCAPE 5 — Wed, 10 Jun 2009 10:28:00 GMT

Abstract:

THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 4.0.8 and later

DISCUSSION

NOTE: In EFT Server version 6, you can specify the location of the EFT Server configuration files in the EFT Administrator interface. The key below is not necessary.

In EFT Server 4.0.8 and later, you can create a registry key to override the location of the FTP.CFG file. When this key is present, the FTP.CFG is loaded from the specified path instead of the default, which is the folder hosting the executable. This feature was added to assist with multiple nodes using the same configuration, such as active/passive configurations.

HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\EFT Server 4.0\Config
"Path=<path_to_config_file>"

For example, if you want EFT Server to use the CFG file at G:\Configs\EFT\FTP.cfg, you would create the following registry value:

[HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\EFT Server 4.0\Config\]"Path="G:\Configs\EFT\"

Include the

Kill EAS Service on Startup

GlobalSCAPE 5 — Wed, 10 Jun 2009 10:23:00 GMT

Abstract:

THE INFORMATION IN THIS ARTICLE APPLIES TO:
	EFT Server version 4.x and later
DISCUSSION
	If this registry key is present and set to "1," EFT Server will find and kill any EASServer.exe processes. [HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\EFT Server 4.0\] "KillEASServersAtStartup"=dword:00000001

Changing the Number of Concurrent Threads Used by Event Rules

GlobalSCAPE 5 — Wed, 10 Jun 2009 10:21:00 GMT

Abstract:

THE INFORMATION IN THIS ARTICLE APPLIES TO:
	EFT Server version 4.x and later
DISCUSSION
	The "Folder Monitor" Event Rule process is limited to 3 concurrent threads by default. This means that if you have 5 Folder Monitor Event Rules monitoring the same folder, and a file is added to the monitored folder, only 3 of the 5 Rules will fire, as determined by the operating system. The 4th and then 5th Rule execute only when one or more of the first three threads are done firing and executing any actions. If you have, for example, 100 concurrent Monitor Folder Event Rules, they will not all be triggered simultaneously. To override the default, create the following key: [HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\EFT Server 4.0\EventRules\] "FolderMonitorWorkerThreadCount"=dword:00000010 (DWORD: the number of allowed concurrent threads)

Enable Alternative Permission Logic

GlobalSCAPE 5 — Wed, 10 Jun 2009 10:18:00 GMT

Abstract:

THE INFORMATION IN THIS ARTICLE APPLIES TO:
	EFT Server version 4 and later
DISCUSSION
	This registry key determines whether EFT Server checks for the "Delete" permission when a client uploads a file. If this setting is not present and/or set to zero, when a connecting client uploads a file, EFT Server checks only for Upload permission. If a file already exists with the same name, it will be overwritten. If this registry setting is present and non-zero, then EFT Server determines if an upload will delete (overwrite) an existing file. If a file already exists, EFT Server does an additional check for Delete permission. [HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\EFT Server 4.0\Config\] "UplReqDel"=dword:00000001 (DWORD: if non-zero value, EFT Server checks if client has Delete permission.)

Web Transfer Client Registry Overrides

GlobalSCAPE 5 — Wed, 10 Jun 2009 10:18:00 GMT

Abstract:

THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 4.x-6.x

DISCUSSION

You can override the hard-coded location of the Web Transfer Client files by setting registry values to indicate the new location of the files you would like to use.

You can add each of the keys you need to a reg file in the following format:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\EFT Server 4.0\EFTClient]
"use_registry"=dword:00000001
"http-applet:/EFTClient/EFTWebClient.htm"="C:\\Program Files\\GlobalSCAPE\\EFT\\EFTClient\\EFTWebClient.htm"

The registry key (e.g., http-applet:/EFTClient/EFTWebClient.htm) indicates the specific file used by the Web Transfer Client, and the value of the key indicates the full file path to use for the file (e.g., C:\\Program Files\\GlobalSCAPE\\EFT\\EFTClient\\EFTWebClient.htm). Set "use_registry"=dword:00000001 (same path).

You can indicate a new location for the following files:

http-applet:/eftclient/eftwebclient.htm

Web Transfer Client Session Timeout

GlobalSCAPE 5 — Wed, 10 Jun 2009 10:12:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5 and later
DISCUSSION

By default, if the Web Transfer client (WTC) sits idle for 5 minutes, the session is released so that others can use one of the concurrent licenses. You may want the session time to be longer or shorter, depending upon your user's expected usage.
You can control this with a Windows registry setting by creating a new DWORD value that indicates the number of minutes that you want the WTC session to be active, but idle, before the session is released.
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\EFT Server 3.0\]
"WTCTimeout"=dword:00000005
Set the DWORD value to the number of minutes that a WTC session can remain idle before it is released for use by others. The default value is 5 minutes.

EFT Server Transfer Engine Stub

GlobalSCAPE 5 — Wed, 10 Jun 2009 10:10:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5 and later
DISCUSSION

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\TED 6\Settings\Connection]
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\TED 6\Settings\Transfer]
"PASVMode"=dword:00000001
2 = PASV mode; 0 = PORT mode

Reverse Banned File Logic

GlobalSCAPE 5 — Wed, 10 Jun 2009 10:07:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5 and later
DISCUSSION
On the Advanced tab of a Site, you can block the upload or download of certain file types. The key below reverses that "banned file logic" from the current "By default allow all files except those below" to "By default exclude all files except those below:” That is, a REVERSAL of the current logic, The reversed logic filters out ALL by default, and only allows in those that the administrator specifies. (For example, if you want to allow only .txt files.)
To activate this feature, create the following key:
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\EFT Server 3.0\]
"RestrictionByFileNameOnUpload"=dword:00000001
(DWORD; non-zero means reverse the logic for banned files [exclude all except those listed])

Upload Throttling

GlobalSCAPE 5 — Wed, 10 Jun 2009 09:42:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.x and later
DISCUSSION

The keys below can be used to prevent a connected client from uploading more than <n> files in <t> seconds.
To activate this feature, create the following keys:
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\EFT Server 4.0\Config\]
"UploadsPerClient"=dword:00000010
(DWORD; this is the count of uploads allowed in the period)
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\EFT Server 4.0\Config]
"UploadsPerClientInterval"=dword:00000030
(DWORD; this is the interval period, in seconds)

ODBC Auth Manager

GlobalSCAPE 5 — Wed, 10 Jun 2009 09:40:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.x and later
DISCUSSION

This key only applies to external ODBC user authentication databases to allow for the "Settings Level" column in the database to specify into which Settings Level a user is placed for new user creation and any synchronization to move a User Setting Level (and home folder) when changed in the database. Refer to Creating Tables for your ODBC Data Source for details of the database tables. A SQL script is provided that will create the necessary tables.
To activate this feature, create the following key:
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\EFT Server 3.0\]
"EnableODBCSettingsLevelField"=dword:00000001
(DWORD; non-zero to enable the feature)

Maintain Password History for "Change Password" Validation

GlobalSCAPE 5 — Wed, 10 Jun 2009 09:36:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.0 and prior
DISCUSSION

In EFT Server 5.1 and later, you can set the password history in EFT Administrator. Remembering the last <n> passwords is also configurable in the registry. This registry setting is available only with "GlobalSCAPE Authentication" and the password type must be "Standard" (Regular).
To activate this feature in versions prior to 5.1, create the following key:
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\EFT Server 3.0\]
"PasswordHistoryLimit"=dword:00000001
(DWORD; 0 means no history)

Legacy SMTP Send Behavior

GlobalSCAPE 5 — Wed, 10 Jun 2009 09:34:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.x and later
DISCUSSION

This key is used for communicating with legacy SMTP servers that do not support RFC 1652 or if having trouble sending messages through your existing SMTP server.
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\EFT Server 4.0\]
"LegacySMTPSendBehavior"=dword:00000001
(DWORD; non-zero to enable the feature)

Using the Server''s time zone for file/folder listings in the HTTP/S engine

GlobalSCAPE 5 — Wed, 10 Jun 2009 09:31:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.x and later
DISCUSSION

In EFT Server version 5 and later, you can create/edit this registry key to alter the behavior of the HTTP/S engine's directory listing format. By default, files and folders are displayed using UTC; however, if this registry value is present and non-zero, we use the Server's time zone for file/folder listings in the HTTP/S engine.
0 = use UTC file times
any integer other than 0 = use Server time zone for file times
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\EFT Server 4.0\]
"UseServerTimeZone"=dword:00000001

Folder Monitor Change Filter Override

GlobalSCAPE 5 — Wed, 10 Jun 2009 09:28:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.1.1 and later
DISCUSSION

In EFT Server version 5.1.1 and later, you can create/edit a registry key to set the "dwFilter" parameter that is passed into the function "ReadDirectoryChangesW()", which is the core of the Folder Monitor feature.
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\EFT Server 4.0\EventRules]
"FolderMonitorFilterValue"=dword:0000007D
The default value is the same legacy value that had been present since the initial delivery of the feature:
FILE_NOTIFY_CHANGE_FILE_NAME | FILE_NOTIFY_CHANGE_ATTRIBUTES | FILE_NOTIFY_CHANGE_SIZE | FILE_NOTIFY_CHANGE_CREATION | FILE_NOTIFY_CHANGE_LAST_WRITE | FILE_NOTIFY_CHANGE_LAST_ACCESS
(This is a value of 0x7D)
This is useful to override to "quiet" the folder monitor event dispatching; for example, if only looking for NEW files added to the folder, then exclude the "FILE_NOTIFY_CHANGE_FILE_NAME | FILE_NOTIFY_CHANGE_ATTRIBUTES | FILE_NOTIFY_CHANGE_LAST_ACCESS" set.

Redirect Custom Command Output to Connected FTP Clients

GlobalSCAPE 5 — Wed, 10 Jun 2009 09:26:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.1.1 and later
DISCUSSION

In EFT Server version 5.1.1 and later, you can create/edit a registry location to cause the output of an Event Rule-executed custom command (when "redirect output to client" is on) to be sent back over the FTP command channel. This option is disabled by default (which is legacy behavior), but setting this DWORD registry value to a non-zero integer will result in this behavior. The Event Rule must be executed SYNCHRONOUSLY for the output to be redirected to the client, so you should ensure at least one IF FAILED Action is defined to force synchronous operation.
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\EFT Server 3.0\]
"FileUploadEventResult"=dword:00000001

Disabling the COMB Command

GlobalSCAPE 5 — Wed, 10 Jun 2009 09:24:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.1.1 and later
DISCUSSION

In EFT Server 5.1.1 and later, you can create/edit a registry location to disable the COMB command to avoid problems with multipart uploads causing multiple file upload events. Restricting transfers to one-part uploads will result in slower transfers, but greatly reduces headaches when you want to process uploaded files, because a file upload success is the entire file. This option is disabled by default (legacy behavior), but setting this DWORD registry value to a non-zero integer causes COMB to be disallowed and not shown in the response to FEAT.
[HKEY_LOCAL_MACHINE\Software\GlobalSCAPE Inc.\EFT Server 3.0\]
"DisableCOMBCommand"=dword:00000001

Ignore Active Directory Home Directories

GlobalSCAPE 5 — Wed, 10 Jun 2009 09:15:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.1.6 and later
DISCUSSION

This registry key is used to allow EFT Server to ignore Active Directory (AD) home directories; that is, you do not want EFT Server to create virtual directories that point to the AD home directories.
Using this key, if you set the IgnoreADHomeDirs registry DWORD value to 1, when AD users log in to the Server, rather than EFT Server creating a virtual folder that links to the user's AD-defined folder, a folder is created under the EFT Server root directory using the user's login name, assuming you have selected the Automatically create a home folder for newly added users check box when you created the Site. (Refer to Creating a Site that Uses NT Authentication for details, if necessary.)
This value only affects a new Site. Before creating the AD Site, set the registry DWORD value, then restart the EFT Server servi

Enable Oracle

GlobalSCAPE 5 — Wed, 10 Jun 2009 08:52:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.1.7 and later (Oracle connectivity is provided with the Auditing and Reporting module in versions 6.0 and later.)
DISCUSSION

This key only applies if you are using an Oracle auditlogger.dll provided by GlobalSCAPE. With this key enabled, if your EFT Server uses an Oracle database, you can upgrade to future releases by installing your custom auditlogger.dll in the EFT Server installation directory.
To activate this feature, create the following key:
[HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\EFT Server 3.0\]
"DBType"=dword:00000000
DWORD; if the key does not exist or is 0 = MSSQL; 1 = Oracle

Buffered CFG Writes

GlobalSCAPE 5 — Wed, 10 Jun 2009 08:47:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.1.7 and later
DISCUSSION

The writing of the configuration (cfg) file to EFT Server occurs 1 byte at a time. The key below enables EFT Server to write the cfg file in "chunks" instead of 1 byte at a time. If you are experiencing long delays when applying changes to the Server, try enabling this key to improve response time.
To activate this feature, create the following key:
[HKEY_LOCAL_MACHINE\ SOFTWARE\GlobalSCAPE Inc.\EFT Server 4.0\]
"UseBufferedArchiveWriter"=DWORD:00000001
1 to enable, 0 or does not exist (default) disable)

Pass the Client's IP Address to the Authentication Request

GlobalSCAPE 5 — Wed, 10 Jun 2009 08:44:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.2.6 and later
DISCUSSION

(This is not recommended, but was a special request from a customer with a unique configuration. This is not a standard part of the LDAP protocol.)
With this registry setting, EFT Server alters the password that is sent to LDAP (during the BIND request) to take on the form:
<client IP>@@<password>.
To activate this feature, create the following key:
[HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\EFT Server 4.0]
"PasswordContainsClientIP"=dword:00000001"
1 to enable, 0 or does not exist (default) to disable

LDAP "Groups Lost" Fix

GlobalSCAPE 5 — Wed, 10 Jun 2009 08:44:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server (all versions)
DISCUSSION

When EFT Server connects to an LDAP server, the LDAP server usually replies with the list of users in the AD server. Occasionally the LDAP server returns a list with 0 users, causing EFT Server to lose all of its user/group associations. If the LDAP server returns an empty list of users, this registry key causes EFT Server to expect the list to come back empty, ignores the results from the query, and keeps the user/group associations that it has.
To activate this feature, create the following keys:
[HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\EFT Server 4.0]
"UserDatabaseSynchronizationMode"=dword:00000002
0 = normal
1 = log auth provider synchronization to event log, but otherwise normal
2 = log auth provider synchronization and do not delete users
[HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\EFT Server 4.0]
"IgnoreZeroUsersResult"=dword:00000001
0 = normal
1 = If zero users received, abort and do not honor sync attempt. Event is logged to the Windows Application log.

Sending EFT Server''s Logs to the Windows Application Event Log

GlobalSCAPE 5 — Wed, 10 Jun 2009 08:43:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.2.6 and later
DISCUSSION

This registry setting sends EFT Server's logs to the Windows Application Event Log.
(As of v5.2.11, this key applies to both the .ex and the .cl logs.)
To activate this feature, create the following key:
[HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\CuteLogger]
"LogToWindowsEventViewer"=dword:00000001"
1 to enable, 0 or does not exist (default) to disable

Override Outbound on Listening IP

GlobalSCAPE 5 — Wed, 10 Jun 2009 08:33:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server version 5.2.11 and earlier
DISCUSSION

In EFT Server 5.2.11 and earlier, if an outbound event was scheduled, EFT Server would use the first IP address in the system's IP address list rather than the listening IP address for the Site. This behavior was changed in EFT Server 5.2.12 so that EFT Server now uses the listening IP address. In recognition that this could adversely affect some of our customers, we added a registry setting to revert to the old behavior.
To return to the legacy behavior, create the following key:
[HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\EFT Server 4.0]
"LegacyListenIP"=dword:00000001
1 to enable, 0 or does not exist (default) to disable)

Unable to connect to EFT Server over HTTPS using a Linux ClearTrust Apache-based proxy

GlobalSCAPE 5 — Mon, 08 Jun 2009 09:00:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:
EFT Server version 6.0.1 only
SYMPTOM

Unable to connect to EFT Server over HTTPS using a Linux ClearTrust Apache-based proxy

RESOLUTION

The Linux ClearTrust Apache-based proxy breaks apart SSL HTTPS headers packet into individual lines/packets. EFT 6.0.1 introduced an error in SSL packet reconstruction that causes any traffic that the proxy breaks into segments over HTTPS to fail. Upgrading to the next release should resolve the issue.
It has not been determined whether packet segmentation is unique to this proxy.

How EFT Server's VFS Permissions Work

GlobalSCAPE 5 — Mon, 08 Jun 2009 08:11:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server versions 6.0.x and prior

DISCUSSION

When a user logs in to EFT Server's HTML Listing and Upload Form or The Web Transfer Client, the files and folders that the user is allowed to access depends on the permissions assigned on the VFS tab in the Administrator interface. The VFS tab allows you to enable or disable the following permissions for a group or a user.
File Permissions - Used to specify file permissions for users or groups in the right pane.
Upload - Allows users to upload to their folder. By default, the Administrators group and the user folders each have Upload permission. (The All Users and Guest groups do not have this permission by default.)
Download - Allows users to download to their folder. By default, the Administrators group, the Guest group, and the user folders have Download permission. (The All Users group does not have

CuteFTP error "connection failed due to an error or timeout"

GlobalSCAPE 5 — Thu, 04 Jun 2009 06:06:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:
CuteFTP (all versions)
SYMPTOM

The following error message occurs when trying to establish a connection in CuteFTP:
ERROR:> The connection failed due to an error or timeout.
POSSIBLE CAUSE

There are a few possible causes for this error:
The host address was mistyped, is not valid, or has changed.
Your firewall or antivirus software is blocking outbound/inbound connections to/from CuteFTP.
The FTP Server is temporarily down.
RESOLUTION

RESOLUTION for #1
Here some examples of valid FTP host addresses:
yourdomain.com (Your own .com, .net, .org, etc domain)
ftp.yourdomain.com
yourwebsite.net
yourwebsite.org
Number IP address format: 68.68.208.68
If you are not sure what the host address is, contact the FTP Server administrator / Web hosting provider to verify that you are typing in the correct host address.
RESOLUTION for #2
Verify that your firewall/antivirus software or hardware is not at fault by disabling it completely. If you are able to connect to the FTP Server

Cannot connect to Server via CuteFTP (Windows Firewall configuration)

GlobalSCAPE 5 — Wed, 03 Jun 2009 04:17:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:
All Windows-based products/versions
SYMPTOM

I installed Windows XP SP2 and now I can't connect to the FTP server.

RESOLUTION

Windows Firewall blocks unsolicited connections to your computer. This includes blocking the ports required for an FTP client to connect to a remote server. In order to connect to an FTP server, you must configure the Windows Firewall to allow incoming connections through port 21.
To configure Windows Firewall
In the Control Panel, open the Security Center.
Click Windows Firewall. The Windows Firewall dialog box appears.
Click the Exceptions tab, then click Add Port. The Add a Port dialog box appears.
In the Name box, type FTP.
In the Port box, type 21.
Leave TCP selected, then click OK.
Click OK to close the Windows Firewall dialog box.
Click the X in the upper right corner to close the Security Center.
Your FTP client must be set to Port mode in order to connect to the server:
In CuteFTP Home: Open the Site Manager (press F4) and click once on t

How can I secure sensitive information (connection strings and AppSettings) in EFT Server''s Secure Ad Hoc Transfer (SAT) module?

GlobalSCAPE 5 — Mon, 01 Jun 2009 10:05:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server (All Versions)
QUESTION

How can I secure sensitive information (connection strings and AppSettings) in EFT Server's Secure Ad Hoc Transfer (SAT) module?

ANSWER

It is highly recommended that you use the delegated administration feature of EFT Server to create a new administrative account that can be used by the Secure Ad Hoc Transfer (SAT) module. This isolates the username/password for the Web application, independent of EFT Administrator. Also, if the EFT Server has multiple Sites, you should grant access to this Secure Ad Hoc Transfer application only to the Site that is used by this application. After the installer has completed successfully, set up a new administrator account in EFT Server, then create a base64-encoded password.
Using Encode64 is not enough for some production environments. Microsoft .NET provides system administrators the ability to secure sensitive information using the Windows Data Protection application programming interface (DPAPI) protected configuration provider and the Aspnet_regiis.exe tool. .NET Framework 2.0 introduced a protected configuration feature that allows you to encrypt sensitive configuration file data by using a command line tool. You can use the Aspnet_regiis.exe tool to encrypt sensitive data, such as connection strings stor

Is CuteFTP Mac compatible with an Intel-based Mac computer?

GlobalSCAPE Support 1 — Fri, 29 May 2009 06:06:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

CuteFTP Mac 3 Professional
CuteFTP Mac 2 Professional
CuteFTP Mac 1 Home
QUESTION

Is CuteFTP Mac compatible with Intel-based Mac computers?

ANSWER

CuteFTP Mac 3 Professional was designed for use on both Intel-based and Power PC-based Mac computers. It is a Mac Universal application. Licensed users of older versions may be eligible to upgrade to CuteFTP Mac 3 Pro for a reduced price. For more information, visit the CuteFTP Mac 3 Pro Upgrade page.
CuteFTP Mac 2 Professional was designed for use on a Power PC-based Mac computer. It was not designed for use on an Intel-based Mac computer and has not been officially tested in that environment. It is not a Mac Universal application. CuteFTP Mac 2 Professional is not supported on Intel-based Mac computers.
CuteFTP Mac 1 Home is not compatible with Intel-based Mac computers and is only intended to be used on Mac OS X versions up to 10.3.8 running on a Power PC processor.

Does EFT Server scale horizontally? How does EFT Server run in a cluster? Will it run "active active"?

GlobalSCAPE 5 — Thu, 28 May 2009 12:30:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server (All Versions)
QUESTION

Does EFT Server scale horizontally? How does EFT Server run in a cluster? Will it run "active active"?

ANSWER

Active/Active load balancing (a topology in which all participant devices share some of the traffic load) is the same as horizontal scaling and Web farms - all different ways to handle more throughput.
EFT Server's advanced software architecture is so vertically scalable that our test lab uses modest hardware for testing. EFT Server can easily handle 2Gbps of continuous traffic—substantially more than our customers typically need.
In addition, many EFT Server customers use load balancers, and clustering and/or load balancing is easily achieved by standard mechanisms of hooking up the boxes to a SAN. The only thing to be careful of are "folder monitor" and "timer" rules, which must be handled on a per-node basis to avoid duplication of event reaction. This is made easier in EFT Server v5 and later by using the "if Node Name" Server Condition.

Does EFT Server support the EPRT and EPSV commands?

GlobalSCAPE 5 — Thu, 28 May 2009 09:02:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server (All Versions)
QUESTION
Does EFT Server support the EPRT and EPSV commands?

ANSWER

EFT Server does NOT support EPRT nor EPSV from an INBOUND (listener/server) perspective. It does from an outbound (client push/pull) perspective only. EPRT and EPSV are supported in CuteFTP Professional.

When using a Copy/Move Event Rule with *.* wildcard, the system does not generate an error if no files exist

GlobalSCAPE 5 — Tue, 26 May 2009 05:34:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:
EFT Server versions 5.2.15 and later
SYMPTOM
When using a Copy/Move Event Rule with *.* wildcard, the system does not generate an error if no files exist.
RESOLUTION
Change or create the following Windows Registry value:
[HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\EFT Server 4.0]
"WildcardFailMode"=dword:00000001
Values:
If the key does not exist, EFT Server continues with legacy behavior. Empty directory does not generate error.
0 - legacy behavior. Empty directory does not generate error
1 – Empty directory is considered an event failure (i.e., files were expected). Triggers event failure actions.

Advanced password expiration options no longer available

GlobalSCAPE 5 — Thu, 21 May 2009 13:04:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server, version 5.x and later
QUESTION

Why are the Advanced password settings (Reset Password Settings dialog box in version 5.x; Password Expiration dialog box in version 6.x) no longer available?

ANSWER
EFT Server's PCI module (version 5.x) / HS module (version 6.x) provides advanced password expiration options. If you do not activate the HS/PCI module, this feature is disabled after the 30-day trial expires. On HS-enabled Sites, passwords are set by default to expire in 90 days. If user passwords have all suddenly expired for an unknown reason and you cannot view the password security settings, it is likely that the default 90-day setting was set in your trial, which has expired.
The Allow Users to Reset their Passwords check box and the Force Password Reset upon Initial Login check box (in version 6.x) are available without the module.

Do EFT Server Event Rules automatically retry if there is a Network failure?

GlobalSCAPE 5 — Thu, 21 May 2009 12:31:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server
QUESTION
If a file is being downloaded or uploaded with an Event Rule, and the connection breaks (network issues, etc.), will the transfer automatically resume? Will it pick up where it left off?
ANSWER

When files are being transferred with Event Rules (copy, move, or download), if there are connection problems (e.g., the network is unavailable), EFT Server will attempt to establish a connection the number of times specified in the Event Rule. When EFT Server is able to re-establish the connection, it continues to transfer the file from where it stopped, even if there are multiple interruptions. There are no retry attempts after a login failure.
(If the network is lost while the Web Transfer Client is transferring files, it waits for a timeout period (30 seconds) and then shows a red X for the transfer. The Status in the queue pane indicates that the transfer failed. If you want to attempt to transfer the file again, you must login again when the network is available. After the Web Transfer Client reconnects, it resumes the transfer from where it stopped.)
When you add a Copy/Move file to host or Download file from host Action to a Rule, the ClientFTP (offload engine) performs retries upon failures -- network failures is the typical example -- based upon the settings in

Internet Explorer Users' IP Addresses Rejected by EFT Server

GlobalSCAPE 5 — Thu, 21 May 2009 11:14:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:
EFT Server (All Versions)
SYMPTOM
Internet Explorer users' IP addresses rejected by EFT Server
RESOLUTION
EFT Server allows you to grant access to one specific IP address or to a range of IP addresses, or to deny access to one specific address or range of addresses. EFT Server can control TCP/IP access at the Server, Site, or Settings Template level, or per user. By default, all IP addresses are granted access to EFT Server.
If the Ban IP address after excessive invalid commands check box is selected on the Site's Login Security Options dialog box, and a user triggers this action, their IP address will appear in the IP Access/Ban List dialog box. If the invalid commands were not malicious and you do not want to ban the IP address, you can remove it from the list by clicking it, then clicking Remove. If this is a frequent occurrence, you may want to increase the number of invalid attempts before banning the IP address or adjust the auto-ban sensitivity level.
Refer to the following topics for more information:
Version 6.x:
Flooding and Denial of Service Prevention
Disconnectin

How can I purge EFT Server data from my SQL database?

GlobalSCAPE 5 — Thu, 21 May 2009 09:18:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server (All Versions)
QUESTION

How can I purge EFT Server data from my SQL database?

ANSWER
Use the procedure below to purge EFT Server data from your SQL database.
Download the SQL script PurgeEftData.txt. Do one of the following
Click the link to open it your browser, then copy and paste the text into a txt file.
Right-click the link, then save the .txt file to your desktop.
Open the script in a text editor and edit the following values:
If the database name is not EFTDB, modify the following line with the name of the database: USE EFTDB.
In the "DeleteTo" variable:
SELECT @DeleteTo = '1/1/2007', @DeleteScope = '1000'
All records BEFORE the DeleteTo date are affected. Edit the date and time to some time in the future if you want all rows to be affected.
In the "DeleteScope" variable:
SELECT @DeleteTo = '1/1/2007', @DeleteScope = '1000'
"DeleteScope is the number of rows to be deleted and how quickly they are deleted. This can be a static value or a percentage. If the database is active, you should delete the records in smaller chunks, perhaps 1000 at a time, so that you do not affect the responsiveness of the SQL server for new/ongoing transactions. If you r

Changing the Root Folder of EFT Server while Retaining Permissions

GlobalSCAPE 5 — Thu, 21 May 2009 09:07:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server (All Versions)
**This topic is for advanced users. If you are unfamiliar with running Windows scripts, seek help from your network administrator or contact GlobalSCAPE support.**

DISCUSSION

Copying or migrating EFT Server configuration might be necessary for several reasons, such as:
Moving a Proof of Concept (PoC) in your staging environment without recreating all the settings and configuration data.
Creating a standard configuration for installation on multiple computers.
Updating EFT Server software with a fresh install rather than patching.
The help topic "Copying an EFT Server Configuration to Several Computers" provides steps to take before moving EFT Server to another location.
If EFT Server's physical file system has been moved, you need to update EFT Server configuration to point to the new location. In the EFT Server Administrator GUI, you specify the path to the Server's root folder; however, pointing to the new root folder causes EFT Server to lose the permissions assigned to EFT Server’s Virtual File System (VFS). To retain all relevant folder permissions and virtual folders, download and extract the scripts in VFS-MigrationScript.zip and use the scripts to copy the VFS permissions to the new root folder structure.
To move the E

Is EFT Server supported on VMWare, ESX Server, and other such virtual environments?

GlobalSCAPE 5 — Tue, 19 May 2009 04:40:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server (All Versions)
QUESTION

Is EFT Server supported on VMWare, ESX Server, and other such virtual environments?

ANSWER

EFT Server is supported on specific Windows operating systems. If a supported operating system is installed on the virtual image, and all other EFT Server system requirements are met, EFT Server should run on the virtual image. (GlobalSCAPE Quality Assurance performs portions of its testing using VMware).
In any case, GlobalSCAPE Customer Support supports EFT Server, not the environment on which it is installed. We do not provide support for installing or configuring Windows or your virtualization software. If you have an issue with the virtualization software, you must call the virtualization software's support desk.
Refer to the EFT Server help documentation for your version of EFT Server to view the complete system requirements.
Refer to http://www.vmware.com/ for information about VMware.

After I changed the time zone on the computer on which EFT Server is installed, the times in the Event Rules and so on are incorrect.

GlobalSCAPE 5 — Mon, 18 May 2009 12:41:00 GMT
Abstract:
THE INFORMATION IN THIS ARTICLE APPLIES TO:

EFT Server (All Versions)
PROBLEM

After I changed the time zone on the computer on which EFT Server is installed, the times in the Event Rules and so on are incorrect.

RESOLUTION

When you start EFT Server, it adopts the time of the computer on which it is installed. If you change the time zone (e.g, from CST to EST) while EFT Server is running, the times will be incorrect in Event Rules, logs, and reports until you restart the EFT Server service.
If you change the time zone on the EFT Server computer, reset the EFT Server service.

GlobalSCAPE's Knowledge Base

Secure Ad Hoc Transfer errors with Microsoft IIS 7

1. Verify the prerequisite role services are enabled

How do I tell IIS to transfer larger files with the SAT module?

What are the known issues in EFT Server?

LDAP Authentication fails when connecting to a SunOne Directory Server.

Can I use my SFTP keys that were generated by EFT Server v5 in EFT Server v6?

ClientFTP.DLL Enable Logging Override

Can I save my Folder Monitor Rules or retrieve jobs from the Queue if they were deleted?

Using the SAT module with Active Directory

Making SAT work with Active Directory

HTTP-to-HTTPS Redirection

Windows Registry Settings

Specify Location of FTP.CFG

Kill EAS Service on Startup

Changing the Number of Concurrent Threads Used by Event Rules

Enable Alternative Permission Logic

Web Transfer Client Registry Overrides

Web Transfer Client Session Timeout

EFT Server Transfer Engine Stub

Reverse Banned File Logic

Upload Throttling

ODBC Auth Manager

Maintain Password History for "Change Password" Validation

Legacy SMTP Send Behavior

Using the Server''s time zone for file/folder listings in the HTTP/S engine

Folder Monitor Change Filter Override

Redirect Custom Command Output to Connected FTP Clients

Disabling the COMB Command

Ignore Active Directory Home Directories

Enable Oracle

Buffered CFG Writes

Pass the Client's IP Address to the Authentication Request

LDAP "Groups Lost" Fix

Sending EFT Server''s Logs to the Windows Application Event Log

Override Outbound on Listening IP

Unable to connect to EFT Server over HTTPS using a Linux ClearTrust Apache-based proxy

How EFT Server's VFS Permissions Work

CuteFTP error "connection failed due to an error or timeout"

Cannot connect to Server via CuteFTP (Windows Firewall configuration)

How can I secure sensitive information (connection strings and AppSettings) in EFT Server''s Secure Ad Hoc Transfer (SAT) module?

Is CuteFTP Mac compatible with an Intel-based Mac computer?

Does EFT Server scale horizontally? How does EFT Server run in a cluster? Will it run "active active"?

Does EFT Server support the EPRT and EPSV commands?

When using a Copy/Move Event Rule with *.* wildcard, the system does not generate an error if no files exist

Advanced password expiration options no longer available

Do EFT Server Event Rules automatically retry if there is a Network failure?

Internet Explorer Users' IP Addresses Rejected by EFT Server

How can I purge EFT Server data from my SQL database?

Changing the Root Folder of EFT Server while Retaining Permissions

Is EFT Server supported on VMWare, ESX Server, and other such virtual environments?

After I changed the time zone on the computer on which EFT Server is installed, the times in the Event Rules and so on are incorrect.

When using a Copy/Move Event Rule with . wildcard, the system does not generate an error if no files exist