MFT Gateway | Secure File Transfer Proxy Solution

What is MFT Gateway?

GoAnywhere’s MFT Gateway provides an additional layer of security when exchanging data with your trading partners. It aligns with zero-trust principles by eliminating direct exposure of internal systems. Our MFT Gateway allows you to keep file sharing services (e.g. FTP/S, SFTP, HTTP/S servers) and documents safely in your private/internal network.

With GoAnywhere’s Secure File Gateway, no inbound ports need to be opened into your private network, which is essential for compliance with PCI DSS, HIPAA, HITECH, SOX, GLBA and state privacy laws.

MFT Gateway Features

GoAnywhere’s secure file gateway provides the extra layer of protection for your file sharing services by:

• Not allowing incoming ports to be opened into the private network, which reduces the risk of intrusion
• Not storing sensitive data files in the DMZ
• Keeping user credentials, certificates, and keys safely in the private network
• Supporting FTP/S, SFTP, SCP, HTTP/S and AS2 file transfer protocols
• Hiding the locations and identities of internal systems
• Not requiring any special hardware components; it is a software-only solution
• Reducing the risk of cyberattacks by minimizing exposed network entry points
• Supporting secure B2B file transfers across distributed environments

Why Use GoAnywhere MFT Gateway as Your Proxy Gateway?

Alongside [GoAnywhere Managed File Transfer](/content/products/goanywhere-mft "Managed File Transfer Solution"/index.html), Gateway provides IT teams with many benefits:

Secure inbound ports to your network

Your [file servers](/content/products/goanywhere-mft/file-servers "GoAnywhere MFT file servers"/index.html) (e.g., FTPS, SFTP, HTTPS, and AS2) can be kept securely in your internal network with GoAnywhere's secure file gateway. This allows you to keep inbound ports to your network closed, which is essential for complying with data security standards like [PCI DSS](/content/solutions/compliance/pci-dss "Learn more about MFT for PCI DSS"/index.html), [HIPAA](/content/solutions/compliance/hipaa-hitech "Learn more about MFT for HIPAA"/index.html), HITECH, SOX, ISO 27000, and the GLBA. MFT Gateway eliminates one of the most common attack vectors in enterprise environments and strengthens perimeter security without disrupting operations.

Keep critical data out of the DMZ

Files can be safely shared with trading partners, users, clients, and vendors while avoiding having critical documents or files stored, even temporarily, in your DMZ. This reduces compliance risk by preventing sensitive data exposure and supports data governance policies and internal security controls.

Connect with external systems securely

As a forward proxy, Gateway can make connections to external systems on behalf of users and applications in the private network. This allows you to more easily manage file transfers from your firewall. Additionally, the identities and locations of your internal systems are hidden for better security. MFT Gateway also enables secure, controlled outbound communication with third-party systems and improves visibility and control over external data exchanges.

Run on any environment or operating system

GoAnywhere Gateway is a platform agnostic, software-only secure file gateway solution. Install it on [Windows](/content/platforms/windows "MFT Windows Platform"/index.html), [Linux](/content/platforms/linux "MFT Linux Platform"/index.html), AIX, UNIX, or other operating systems to enhance file security in whatever environment works best for you. Gateway supports enterprise IT environments with diverse infrastructure requirements.

File Acceleration

As a proxy server, Gateway enables accelerated file transfers with FileCatalyst — even when GoAnywhere MFT servers are on an internal network and not exposed to the internet. Gateway allows you to keep your MFT server segregated and works seamlessly with FileCatalyst clients and the FileCatalyst Service. This service provides enterprise-grade file acceleration for moving large data quickly from anywhere in the world, even in adverse network conditions.

Files can be transferred at speeds up to 10 times faster (or more) over traditional protocols, such as SFTP, FTPS or HTTP. Plus, files can be sent even while they are still growing or are being encoded. This service improves performance for large file transfers and time-sensitive workflows. It also supports global operations with optimized transfer speeds.

GoAnywhere Gateway Features At-A-Glance

• No incoming ports need to be opened into the private network
• User credentials, permissions, certificates, and keys are kept safe in the private network
• Hides the locations and identities of internal systems
• Services configurations are maintained/stored in the private network
• Supports FTP, FTPS, SFTP, SCP, HTTP, HTTPS and AS2 file transfer protocols
• Built-in load balancer to distribute workloads across multiple systems

In essence, when added to GoAnywhere MFT, GoAnywhere Gateway serves as a transparent interface between internal systems and external systems without exposing sensitive files or your private network.

GoAnywhere MFT Gateway FAQs

What is MFT Gateway?

MFT Gateway is an enhanced reverse and forward proxy that provides an additional layer of security for organizations when exchanging data with trading partners. With Gateway enabled, file sharing services, such as MFT, FTP/S, SFTP, HTTP/S, etc., can be kept safely inside your private network, without exposing sensitive data to your DMZ (Demilitarized Zone). And connections can be made to external systems on behalf of users in the private network.

With GoAnywhere Gateway, no inbound ports need to be opened into your private network, which is essential for compliance with PCI DSS, HIPAA, HITECH, SOX, GLBA and state privacy laws.

How does MFT Gateway work?

GoAnywhere’s MFT Gateway uses both forward and reverse proxy. With the reverse proxy, MFT Gateway masquerades as the same file sharing services for which it is front-ending. When trading partners want to exchange data, they connect to the MFT Gateway instead. Any additional data channels needed are then opened from the private network and through the Gateway, with no inbound ports needed.

With the forward proxy, GoAnywhere Gateway connects to external systems on behalf of users and applications in the private network. Routing these outbound requests through GoAnywhere Gateway allows you to more easily manage file transfers from your firewall. The forward proxy feature also adds security as it can hide the identities and locations of your internal systems.

Where should GoAnywhere Gateway be installed?

GoAnywhere Gateway should be installed on a machine in the DMZ (demilitarized zone), which is the neutral zone between your organization's private/internal network and the outside public network (internet).

On which platform can GoAnywhere Gateway be installed?

GoAnywhere Gateway can be installed onto Windows, Linux, IBM System p (AIX), UNIX, HP-UX, Mac OS, and Solaris platforms.

Can GoAnywhere Gateway run in a VMware virtual environment?

Yes. HelpSystems is a partner with VMware. GoAnywhere Gateway has been tested and verified to run in a VMware virtualized environment. GoAnywhere Gateway has been awarded the VMware Ready logo.