GoAnywhere
Director™ is a managed file transfer solution that will automate and
secure the exchange of data with your customers, trading partners and
enterprise servers. It provides a single point of control with
multi-step workflow abilities, management controls and detailed audit
trails. GoAnywhere Director can connect to almost any system (internal
or external) using standard file transfer protocols including secure
FTP, FTPS, SFTP, HTTP, HTTPS, AS2, SMB, MQ and SMTP. It can also
encrypt and compress files using popular Open PGP encryption, GPG, ZIP,
GZIP and TAR standards.

GoAnywhere Director's intuitive interface and comprehensive
workflow features will help you to eliminate the need for custom
programs/scripts, single-function tools and manual processes which were
traditionally required for moving and translating data. This managed
file transfer and secure FTP automation solution will reduce costs,
improve the quality of your data transmissions and help your
organization to comply with data security policies and regulations.
-
Automates and simplifies FTP (File Transfer Protocol) processes
-
Connects to secure FTP servers (SFTP, FTPS, and SCP) for protected
communications
-
Guarantees delivery with connection retries and file auto-resume (for
interrupted transfers)
-
Exchanges data with web servers using HTTP, HTTPS and Web Services
-
Sends AS2 messages with support for multiple file attachments
-
Monitors folders with options to scan for new, changed or deleted files
-
Accesses files and directories on network shares using SMB/CIFS protocol
-
Encrypts, signs and decrypts files using Open PGP encryption standard
-
Compresses and decompresses files using ZIP, GZIP and TAR standards
-
Connects to popular database servers including DB2, DB2/400, SQL
Server, Oracle, PostgreSQL, Informix, MySQL and Sybase
-
Translates data to/from database tables, Excel, XML, Delimited text and
Flat File or Fixed Width file formats
-
Replicates data between database servers
-
Connects to Websphere MQ, SonicMQ and ActiveMQ for enterprise messaging
-
Sends and retrieves files via E-mail and secure E-mail (with S/MIME
encryption)
-
Calls customer programs and scripts as part of business process
workflows
-
Allows for remote administration and monitoring through an intuitive
browser interface
-
Provides a comprehensive built-in scheduler for running transfers at
future dates/times with recurring options
-
Includes commands and APIs for launching transfers from remote systems
and applications
-
Produces detailed audit trails with comprehensive reporting
-
Optionally sends logs to an enterprise SYSLOG server
-
Includes integrated Key Management tools for Open PGP keys, SSH keys
and SSL/TLS certificates
Administration
GoAnywhere includes a user friendly browser-based
interface
for performing configuration and monitoring in the product. This
AJAX-enabled interface is intuitive and functional, complete with
field-level help text. All popular browsers are supported including
Internet Explorer, FireFox, Safari and Chrome. In addition, most
devices can be used to access GoAnywhere Director including
Windows/Linux/Mac laptops and desktops, iPads, iPhones, Android phones
and other smart phones.
The main GoAnywhere dashboard uses icon-driven links, tabs and drop
downmenus to provide access to commonly used components in GoAnywhere,
as well as vital system statistics and auidt logs.

Resources: For
working with the Resources
(servers) to exchange data with, including FTP servers, database
servers, HTTP servers, etc. This component allows authorized users to
add, change, remove and view Resources.
Projects: For
working with Projects, which are
definitions of the business processes to be performed in GoAnywhere.
This component allows authorized users to add, change, remove, view and
execute Projects.
Scheduler: For
working with Scheduled Jobs,
which are the Projects that are scheduled to run at future dates/times.
This component allows authorized users to add, change, remove and view
scheduled entries.
Active Jobs: For
working with active Jobs,
which are the Projects that are currently running in GoAnywhere. This
component allows authorized users to view, hold, release and cancel
active Jobs.
Completed Jobs:
For working with the Jobs which
have finished executing. This component allows authorized users to
search for completed jobs by date range, project name, user name and
status.
Users: For
working with the Users that are
authorized to utilize GoAnywhere. This component allows security
officers to add, change, remove and view GoAnywhere Users.
Groups: For
working with User Groups (which are
collections of similar users). This component allows security officers
to add, change, remove and view GoAnywhere User Groups.
GoAnywhere can retrieve data from enterprise database servers and local
file systems. This data can then be converted into other formats,
encrypted and compressed. Information can be distributed to database
servers, FTP servers, HTTP servers, Email and other file systems.
GoAnywhere can retrieve files from FTP servers, Email servers, HTTP
servers and local file systems. These files can then be uncompressed,
decrypted and placed on a local file system. Files can be imported into
database servers with support for Excel, XML, fixed-width text and
delimited text formats.
Resources
You can predefine the server connections in GoAnywhere
Director as
reusable "Resources", which will save time and ensure quality when
defining file transfers and other tasks within Projects. Instead of
re-typing connection details for each task, the desired Resource can
simply be selected from a drop-down list.
Resource definitions
may include the server connection details, such as the host name of the
server, port number, login credentials and preferences. Resources can
be defined for Database servers, FTP and Secure FTP servers, Email
servers, AS2 servers and HTTP/s servers, MQ Servers, Network shares and
other types of servers.
For separation of duties, certain users
can be authorized for creating and maintaining Resources. The
properties for these Resources can be hidden from other unauthorized
users, preserving the confidential connection information for your
trading partners.
All Resource definitions are stored in
GoAnywhere Director's central database. Any passwords specified for
Resource authentication can be stored in encrypted form. Example:
Database
Resources: DB2
on System i (iSeries, AS/400), DB2, Oracle, PostgreSQL,Microsoft
SQL Server, Sybase, MySQL, Informix
AS2
Resources: AS2
(Applicability Statement 2)
FTP
Resources: Standard
FTP, SFTP
(FTP over SSH), FTPS
(FTP over SSL), SCP
HTTP
Resources: HTTP
& HTTPS
(HTTP over SSL/TLS)
Email
Resources: POP3
(standard / secured), IMAP
(standard / secured), SMTP
(standard / secured)
MQ
Server Resources: Websphere
MQ, Sonic
MQ, Active
MQ
Network
Share Resources: SMB/CIFS
IBM
iSeries (AS400) Resources
For
example: When
creating a Resource, specify a unique name and the settings for the
Resource. For instance, if defining a FTP Resource, you would specify
FTP connection settings such as its host name or IP address, User ID
and password.
Projects
You can create "Projects" in GoAnywhere Director
to define the
file transfers and business processes to perform. A Project can contain
multiple steps (called tasks) to execute as a seamless end-to-end
workflow. For instance, a Project may include a task to retrieve data
from a database server, a second task to convert the data into an Excel
document, a third task to encrypt the document, and finally a task to
distribute the encrypted document to an SFTP server. There
are no
limits to the number of tasks that can be performed within a single
Project.
Projects are designed using intuitive wizards and
templates. No programming or special technical skills are needed. The
Project definitions are stored in a central database, which can be
worked with, scheduled and executed by authorized users and
applications.
Listed below is a sample Project outline which
retrieves data from a database file, converts the data into an Excel
document, encrypts the document with OpenPGP and transmits it to a FTP
server:

Projects are organized within user-defined folders. Each
folder
can have granular permissions to control which users can view and/or
execute the Projects within that folder. For instance, users within the
HR department may only be authorized to run Projects within the HR
folder.

Project features:
- Define
through graphical wizards
- Chain
together an unlimited number of Tasks
- Pass
results from one Task into another
- Conditionally
execute Tasks
- Define
and utilize variables, which may be overridden at runtime
- Define
error recovery logic
- Define
custom logging levels
- Organize
under user-defined folders
- Execute
from almost any platform
Tasks
GoAnywhere Director includes over 50 business
processes
(tasks) that can be utilized to retrieve, transform, process, encrypt,
decrypt, compress, decompress and distribute data. Tasks are also
provided for managing files and calling native commands and programs.
Multiple
tasks can be "chained" together within a Project to perform a series of
steps. For instance, a Project could be defined with a task to retrieve
an XML file from a trading partner, then another task to parse the XML
and finally a task to import the data into a database table.
Listed below is the summary of tasks included:
SQL:
Runs any SQL statement supported by the database server (i.e. SELECT,
UPDATE, INSERT, CREATE, DELETE, CALL, etc). This task is especially
useful for extracting data from database tables, which could then be
converted to various file formats and transmitted. It is also
useful
for importing data from files that may have been retrieved from trading
partners.
CSV Write:
Converts a set of records to a CSV (delimited text) formatted file.
CSV Read:
Reads a CSV file and produces an output that can be used in another
task (for instance, to import into a database).
Fixed-width Write:
Converts a set of records to a fixed-width (e.g. fixed length)
formatted file.
Fixed-width Read:
Reads a fixed-width formatted file and produces an output that can be
used in another task (for instance, to convert to XML format).
Flat File Read:
Reads a flat file and produces an output that can be used in another
task.
Excel Write:
Converts a set of records to Microsoft Excel file format. Supports
Microsoft Excel 95, 97, 2000, XP, 2003, 2007, and 2010 file types.
Excel Read:
Reads an Excel file and produces an output that can be used in a
different task (for instance, to convert to CSV format). Supports
reading from Microsoft Excel 95, 97, 2000, XP, 2003, 2007, and 2010
workbooks.
XML Write:
Converts records to an XML document. Accepts multiple inputs to produce
complex XML structures with optional Schema and DTD validation. For
example, order header and order detail records can be combined within a
single XML document.
XML Read:
Reads data from a XML document (with or without Schema and DTD
validation) and produces one or more outputs that can be used in
another task (for instance, to import into a database).
PGP Encrypt:
Encrypts files with one or more public keys (uses the Open PGP
standard).
PGP Decrypt:
Decrypts files with a private key (uses the Open PGP standard).
PGP Sign:
Signs files with a private key (uses the Open PGP standard).
PGP Verify:
Verifies file signatures with a public key (uses the Open PGP standard).
Zip:
Compresses, packages and optionally encrypts files using the ZIP
standard.
UnZip:
Decompresses ZIP files.
GZip:
Compresses files using the GZIP standard.
GUnzip:
Decompresses GZIP files.
Tar:
Packages several files together using the TAR standard.
Untar:
Unpackages a TAR file.
FTP:
Connects to a FTP server for performing file transfers (gets, puts) and
other FTP commands.
FTPS:
Connects to a FTPS server for transferring files over SSL/TLS.
SFTP:
Connects to a SFTP server for transferring files over SSH.
SCP:
Connects to a SCP-compliant server for transferring files over SSH.
Send E-Mail:
Sends E-Mail messages through a SMTP server (with or without S/MIME
encryption). Supports file attachements.
Retrieve E-Mail:
Retrieves E-Mail messages from POP3 and IMAP servers (with or without
S/MIME encryption).
AS2: Send
messages using Applicability Statement 2.
HTTP:
Transfers files using HTTP protocol.
HTTPS:
Transfers files using HTTPS (HTTP over SSL).
Open MQ Session:
Opens a Message Queue Session with a MQ Server.
MQ Send Message:
Sends messages to a MQ Server.
MQ Retrieve Message:
Retrieves messages from a MQ Server.
Commit/Rollback MQ Message:
Processes or rolls back MQ Messages without closing the session.
Close MQ Session:
Closes the session with the MQ Server.
Copy:
Copies files and directories on local file systems, as well as network
shares.
Create File List:
Builds a list of files based on filter criteria (e.g. wildcards, size,
date). This "file list" can then be used in other tasks.
Move:
Moves files and directories.
Delete:
Deletes files and directories.
Make Directory:
Creates a new directory on the file system.
Merge Files:
Merges multiple files into a single file.
Rename:
Renames one or more files in a directory.
Search and Replace:
Searches for a string in a file and replaces it with a new value.
Execute IBM i Commands and
Programs: Executes (calls) one or more commands
or programs on a IBM i (iSeries) machine.
Execute Native Command:
Executes a command (e.g. executable, script, etc.) on the system that
is locally accessible by GoAnywhere Director.
Create Workspace:
Creates a temporary directory to store temporary files while the job is
running.
Delay:
Pauses a project for a specified period of time.
Delete Workspace:
Deletes the job's workspace, if any.
Timestamp:
Makes the current date and time availabe to various tasks in the
project. Custom formats can be defined to indicate how the date and/or
time should be formatted.
Print:
Writes user-specified text into the job log.
Raise Error:
Generates an error in the Project, which can be used to abort the job
or route control to another Module.
Set Variable:
Assigns a new value to a Variable.
Call Project:
Calls another Project located in the same installation of GoAnywhere
Director.
Call Remote Project:
Calls another Project located on a different (remote) installation of
GoAnywhere Director.
GoAnywhere HTTPS:
Posts and Gets data from the secure HTTPS server in the GoAnywhere
Services module.
NOTE:
Tasks can be conditioned on user-defined criteria and grouped within
Loops.
Data
Distribution
GoAnywhere Director™ can retrieve data from enterprise
database
servers, local file systems and network shares. This data can then be
converted into other formats, encrypted and compressed. Information can
be distributed to database servers, FTP servers, SFTP servers, SCP
servers, FTPS servers, AS2 servers, HTTP(S) servers, Email, MQ servers
and other file systems.

Data Retrieval
GoAnywhere Director can retrieve files
from FTP servers,
SFTP servers, SCP servers, FTPS servers, Email servers, HTTP(S)
servers, MQ servers, local file systems and network shares. These files
can then be optionally uncompressed, decrypted and placed on a file
system. File contents can also be imported into database servers with
support for Excel, XML, fixed-width text and delimited text formats.

Connectivity
GoAnywhere
Director connects to a wide variety of servers for exchanging
data.
The server connections are made over the TCP/IP network using standard
protocols.
No
additional software components need to be installed on any servers to
which GoAnywhere Director connects. This centralized non-evasive
solution allows you to save significant licensing fees and have a
single point of control and administration.
Databases
GoAnywhere
Director can connect to a wide variety of database servers including
DB2 on the IBM System i, DB2, Oracle, PostgreSQL, SQL Server, Informix,
Sybase and MySQL. Since GoAnywhere Director connects to
database
servers over the TCPIP network using standard drivers, no additional
software needs to be loaded onto those database servers.
Database
server connections can be defined in GoAnywhere Director as reusable
Resources which can then be selected from simple drop-down menus.
Any
SQL statement supported by the database server can be issued by
GoAnywhere Director including SELECT, UPDATE, INSERT, DELETE, CALL and
CREATE statements.
Data Export
Rows
(records) can be retrieved from tables (physical files) on the database
servers using SQL SELECT statements. An intuitive SQL Wizard
is
provided in GoAnywhere Director for building SELECT statements
quickly. With the wizard, the user can choose tables,
joining, fields,
column headings, "where" criteria and "order by" criteria.
The
selected records can be converted into Excel documents, delimited text
files, fixed-width text files and XML documents. As
part of a
cohesive process, the resulting files can then be compressed and/or
encrypted and then placed on the local file system, distributed to FTP
and HTTP servers, or sent to email addresses.
Data
Import
Files
can be imported into database tables using GoAnywhere Director. These
files may already exist on the local file system or may have been
fetched by GoAnywhere Director from FTP servers, HTTP servers or Mail
servers.
GoAnywhere
Director can read data from popular formats including Excel documents,
delimited text files, fixed-width and flat file text files and XML
documents. The imported data can be appended to the end of existing
tables or can replace the contents of the table.
Database
Replication
Rows
(records) can be replicated between database servers using GoAnywhere
Director. For instance, a project could be defined to copy records from
a System i physical file into a SQL Server table. This project could be
scheduled and automated. Records can be appended to the end of a table
or can replace the existing records in the table.
AS2
Applicability
Statement 2 (AS2) is a standard originally created for transmitting EDI
documents, but can be used for virtually any file type. The messages
are built using the S/MIME format and sent over HTTP or HTTPS
connections. The AS2 functionality in GoAnywhere Director is Version
1.2 compliant.
AS2
messages can be compressed, signed, encrypted and sent over an SSL
tunnel making AS2 a very secure option for transferring files. AS2 also
implements MDNs (receipts) to ensure the delivery of the messages.
Using signed receipts and comparing the returned message checksum value
creates a non-repudiation of receipt (NRR), which is considered legal
proof of delivery.
GoAnywhere
Director AS2 Features
File Attachments
- GoAnywhere Director is not limited to attaching just one file per AS2
message. You can attach multiple files to a message or use a variable
to automatically attach files meeting your criteria.
Compression
- Zlib compression improves transmission time by shrinking the size of
your messages.
Digital Signatures
- Ensure authenticity by digitally signing your messages. Most AS2
servers require signed incoming messages. Signed messages provide
trading partners with confirmation of who sent the message.
Message Encryption
- Encrypt all the messages you send to a trading partner with their
public key. Together with Digital Signatures and Message Integrity
Checks, message encryption keeps your data safe.
Message Integrity
Check (MIC)
- The MIC is a comparison of checksum values. A checksum is calculated
when you send a message and your trading partner creates a checksum
after they receive the message. The checksum is returned in the message
receipt. If the values match, the message they received is the exact
message you sent.
Signed Receipts
- GoAnywhere Director receives automatic message receipts through
synchronous connections. A manual receipt through asynchronous email is
also available. Receipts can be digitally signed, completing the secure
AS2 message cycle.
Logging
- Message logging in GoAnywhere Director not only records standard AS2
"message traffic," but logs message date and time, who sent them, and
what was sent.
Configuring
AS2 Resources (server connections) in GoAnywhere Director saves time
and provides additional security through separation of duties. A
Resource Manager can configure an AS2 Resource for each connection.
After a resource is defined, a Project Designer can create a task and
just refer to the AS2 Resource without needing to know the confidential
login credentials for a trading partner.
Email
GoAnywhere
Director can be utilized for both sending and receiving email.
Connections can be made to both standard and secure email servers using
SSL. Email servers (SMTP, POP3, IMAP) can be pre-defined in GoAnywhere
Director's Administrator as reusable Resources which can then be
selected from simple drop-down menus.
Email
Tasks can be placed within GoAnywhere Director Projects and executed as
part of a cohesive process. For instance, a Project could be
defined
to retrieve records from a database file, convert the records into an
Excel document, and then email the Excel document to one or more
recipients.
Send email
features:
Select the email SMTP server to send the emails through
Specify multiple To, CC and BCC addresses
Specify the subject, message and reply-to
Attach one or more files
Use international characters
Connect over SSL
Enable S/MIME encryption
Pass in variables (at runtime) to override email attributes
Retrieve email
features:
Select the POP3 or IMAP server to retrieve the emails from
Filter incoming emails based on From email address, To email address,
Subject and Message text
Store email details and attachments for further processing within a
Project
Connect over SSL
Decrypt S/MIME messages
Pass in variables (at runtime) to override email attributes
FTP
GoAnywhere
Director can connect to both standard FTP servers and secure FTP
servers using SFTP (FTP over SSH), SCP, and FTPS (FTP over SSL)
protocols. GoAnywhere Director will help guarantee delivery of FTP
transfers with options to auto-retry connections, auto-resume
interrupted file transfers and perform integrity checks of successful
file transfers.
GoAnywhere
Director FTP features
Full support of the standard FTP command set
Get, Put, Delete and Move files
Create, Change and Rename directories
Execute custom commands
Transfer multiple files per connection
Autodetect Binary and ASCII modes
Support for Passive and Active connections
Retry connections and auto-resume file transfers with user-defined
settings
File integrity verification using checksum algorithms of CRC-32 and MD5
Suffix and prefix file names with constants, timestamps or variables
Override file names and other properties at execution time using
variables
Configurable port ranges
SOCKS and HTTP Proxy support
Ability to change file permissions (if authorized)
Timestamp preservation (optional)
Alerts for transfer failures via email, text messages and system
messages
FTP
server connections can be pre-defined in GoAnywhere Director's
Administrator as reusable Resources which can be selected from simple
drop down menus. FTP Tasks can be placed within GoAnywhere Director
Projects and executed as part of a cohesive process. For instance, a
Project could be defined to retrieve records from a database file,
convert the records into a CSV file, and then put the CSV file onto a
FTP server.
File Filtering
When getting or
putting files via FTP, the files selected can be included and excluded
using various filter criteria:
Wildcards (i.e. "trans*.txt" or "*.xls")
Regular expressions
Date and time range
Size range
Variables passed to the Project
FTP Logs
Audit
trails (logs) are generated for all FTP transmissions in GoAnywhere
Director to meet auditing and compliance requirements. The level of log
detail can be controlled by an administrator on a per-Project basis.
This detail can be configured to include all FTP commands issued, FTP
messages and file names transferred. Log messages can additionally be
sent to a Syslog server using UDP or TCP connections.
FTPS
GoAnywhere
Director supports FTPS (FTP over SSL/TLS) protocol for securing data
transmissions with your trading partners and enterprise servers.
Passwords, client certificates and server certificates are supported
for authentication. GoAnywhere Director will help guarantee delivery of
FTPS transfers with options to auto-retry connections, auto-resume
interrupted file transfers and perform integrity checks of successful
file transfers.
GoAnywhere
Director FTPS Features
Ability to authenticate both the Client and Server systems using X.509
Certificates
Dual factor authentication capability using passwords and certificates
Support for trusted and self-signed certificates
Full support of the standard FTP command set
Get, Put, Delete and Move files
Create, Change and Rename directories
Execute custom commands
Transfer multiple files per connection
Autodetect Binary and ASCII modes
Support for Passive and Active connections
Retry connections and auto-resume file transfers with user-defined
settings
File integrity verification using checksum algorithms of CRC-32 and MD5
Suffix and prefix file names with constants, timestamps or variables
Override file names and other properties at execution time using
variables
Configurable port ranges
SOCKS and HTTP Proxy support
Timestamp preservation (optional)
Ability to change file permissions (if authorized)
Alerts for transfer failures via email, text messages and system
messages
Ability to use Clear Command Channel (CCC) to connect through a NAT
firewall
FTPS
server connections can be pre-defined in GoAnywhere Director's
Administrator as reusable Resources which can be selected from simple
drop down menus. FTPS Tasks can be placed within GoAnywhere Director
Projects and executed as part of a cohesive process. For instance, a
Project could be defined to retrieve records from a database file,
convert the records into a CSV file, and then put the CSV file onto a
FTPS server.
File
Filtering - When
getting or putting files via FTPS, the files selected can be included
and excluded using various filter criteria:
Wildcards (i.e. "trans*.txt" or "*.xls")
Regular expressions
Date and time range
Size range
Variables passed to the Project
FTPS
Logs
Audit
trails (logs) are generated for all FTPS transmissions in GoAnywhere
Director to meet auditing and compliance requirements. The level of log
detail can be controlled by an administrator on a per-Project basis.
This detail can be configured to include all FTPS commands issued, FTPS
messages and file names transferred. Log messages can additionally be
sent to a Syslog server using UDP or TCP connections.
X.509
Certificate Management
A
comprehensive Certificate Manager is provided in GoAnywhere Director to
allow for the management of X.509 certificates. This
Certificate
Manager can be used to create certificates, generate CSRs, import CA
replies, import trusted certificates and view certificates. These
certificates can be utilized within GoAnywhere Director for automating
FTPS and HTTPS transmissions. The Certificate Manager can
also be used
to export certificates for sharing with your trading partners.
Standards Support for FTPS
SSL Versions: SSL 2.0 & SSL 3.0 (also known as TLS 1.0)
Connection Types: Explicit SSL (AUTH
SSL and AUTH TLS) & Implicit SSL
Ciphers (Symmetric Encryption Algorithms):
AES-128, AES-192, AES-256, DES, RC4,
&Triple
DES (DESede)
Authentication and Key Exchange Algorithms: Diffie-Hellman, DSA,
RSA
Hash Algorithms: MD5, SHA1
Certificate Key Store Formats:
JKS (Java Key
Store) & PKCS12
HTTPS
GoAnywhere
Director can be utilized for exchanging files with HTTP servers (Web
Sites).
Connections
can be made to both standard HTTP servers and secure HTTPS servers
using SSL. HTTP(S) servers can be pre-defined in GoAnywhere Director's
Administrator as reusable Resources which can then be selected from
simple drop down menus.
HTTP
Tasks can be placed within GoAnywhere Director Projects and executed as
part of a cohesive process. For instance, a Project could be defined to
get a CSV file from a HTTPS server, read the data from the CSV file,
and import the data into a database file.
HTTP(S) features:
Cookies support
HTTP Redirects support
Perform requests with parameters
Download/upload multiple files per session
Filter files to download based on last modified date/time
Pass in variables (at runtime) to override HTTP(S) attributes
Message Queue (MQ)
GoAnywhere
Director connects to enterprise message queue (MQ) servers including
Websphere MQ (MQ Series), SonicMQ and ActiveMQ using the JMS standard.
Both MQ Topics and Queues are supported for exchanging data between
customer applications and GoAnywhere Director using this fault-tolerant
communication model.
Message
properties can be applied to tell the MQ Server or recipent more
information about the message contents. GoAnywhere can also
filter the
messages being retrieved by using standard JMS message selectors.
SCP
GoAnywhere
Director supports SCP (Secure Copy) for securing data transmissions
with your trading partners. SCP creates an encrypted tunnel using SSH
between two computer systems and will protect against the following
attacks:
IP spoofing, where a remote host sends out packets which pretend to
come from another, trusted host
IP source routing, where a host can pretend that an IP packet comes
from another, trusted host.
DNS spoofing, where an attacker forges name server records
Interception of cleartext passwords and other data by intermediate hosts
Manipulation of data by attackers in control of intermediate hosts
GoAnywhere Director provides
SCP features to satisfy enterprise requirements.
Ability to authenticate using passwords or SSH keys
Get, Put, MGet commands
Transfer multiple files per connection using Loop functionality
Autodetect Binary and ASCII modes
Indicate the number of connection retry attempts and timeout values
Auto suffix and prefix file names with constants, timestamps or
variables
Override file names and other properties at execution time using
variables
Auto retry with user-defined connection timeouts and retry limits
Configurable port numbers
Support for Adaptive connections
Generation of detailed logs (audit trails)
SSH
Key Management
A
comprehensive Key Manager is provided in GoAnywhere Director to allow
for the management of SSH Keys. The Key Manager can be used to create
SSH public and private keys, export keys and view keys. These SSH Keys
can be utilized within GoAnywhere Director for automating SFTP
transmissions.
GoAnywhere Director supports
the following standards for SCP.
Protocol:
SSH 2.0
Ciphers
(Symmetric Encryption Algorithms): Triple DES (key length of 192
bit), Blowfish
(key length up to 448 bit) & AES (key length up to
256 bit)
MAC Algorithms:
MAC-SHA1 (key
length of 160 bit, digest length of 160 bit), HMAC-SHA1-96 (key length of 160
bit), digest length of 96 bit), HMAC-MD5 (key length of 128
bit, digest length of 128 bit), HMAC-MD5-96 (key length of 128
bit, digest length of 96 bit)
Key Exchange
Algorithms: Diffie-Hellman, MODP - Groups 1, 2, 5 - 1536
bit), 14 (2048-bit), 15 (3072-bit), 16 (4096-bit), 17 (6144-bit) and 18
(8192-bit).
SSH Private Keys:
OpenSSH
encoded keys, PEM (privacy enhanced message)
encoded keys
SSH Public Keys:
OpenSSH
encoded keys
Security
GoAnywhere Director implements comprehensive
security features to satisfy enterprise-level policies and compliance
requirements.
Designated
"Security Officers" are responsible for configuring the Users and User
Groups whom are authorized to use GoAnywhere Director. Users and User
Groups can be restricted to specific GoAnywhere Director functions
through the use of "Roles". Users can additionally be restricted to
particular GoAnywhere Director Projects and Resources with permission
lists.
The flexible authority controls in GoAnywhere Director
allows broad use of the product by both I.T. personnel and end-users
while providing strong security.
Roles
Roles
indicate which sets of functions can be accessed within GoAnywhere
Director. Security Officers can assign Roles to both Users
and User
Groups.
For
instance, a User could be granted a "Project Designer" role, in which
they will have authority to create and edit Project definitions within
the folders they have access permissions. Another user could have a
"User" role, in which they are only authorized to execute (not change)
Projects within the folders to which they have authority.
Users and Passwords
Authorized
users must have a valid User ID and Password to utilize GoAnywhere
Director. User passwords can be authenticated within GoAnywhere
Director or can be authenticated against a Windows Active Directory, a
generic LDAP server or an IBM System i machine (i5/OS users).
User Groups
A
User can be assigned to one or more User Groups. The User adopts the
Roles assigned to the User Groups they belong to. This allows a
Security Officer to quickly adjust the authorities for multiple Users
at once by adjusting the authorities on the User Group to which they
belong.
Resource and Project Permissions
Users
and User groups can be restricted to particular Resources and Project
folders using permission lists. For instance, a User could be granted
authority to execute the Projects within a particular folder. In turn,
they can be restricted from having access to Projects in other folders.
This flexibility allows broad usage of the product by a variety of
users while protecting access to sensitive Projects.
Additional Security Features
GoAnywhere
Director's centralized global log will track all successful user logins
and failed login attempts.
The
GoAnywhere Director browser-based Administrator can be configured for
SSL (HTTPS) so all logins and administrative activities are encrypted.
This allows authorized users to safely work with GoAnywhere Director
from remote locations over the internet.
Translation
GoAnywhere
can translate data to/from a variety of popular formats.
Write
formats supported: Excel, Delimited Text, Fixed Width Text,
XML
Read formats
supported: Excel, Delimited Text, Fixed Width Text, XML
Encryption
GoAnywhere Director implements
several popular encryption standards for securing data.
Open PGP
GnuPG (GPG)
ZIP with AES
FTPS (FTP over SSL)
SFTP (FTP over SSH)
HTTPS (HTTP over SSL)
Secure Email using SSL
AS2 (Applicability Statement 2)
Compression
GoAnywhere provides Tasks for zipping and unzipping
files using the
ZIP and GZIP standards. A .ZIP file can be created to package, compress
and encrypt one or more files. .ZIP files are very useful for reducing
disk space, minimizing transmission times and for keeping related files
organized together.
When creating a .ZIP file, a password can additionally be specified to
secure the data using either standard protection or AES (Advanced
Encryption Standard). This is a symmetric form of encryption, in which
the same password will be used to both zip and unzip the file.
Typical data can often be reduced to 1/10th of its original size.
GoAnywhere supports the zipping and unzipping of large files
(multi-gigabyte in size).
After zipping file(s) with GoAnywhere, the resulting .ZIP file can then
be placed on the Local File System, distributed to a FTP or HTTP
server, or sent to one or more E-mail recipients. For instance, a
project can be defined to automatically retrieve records from a
database, create an Excel document from those records, then zip the
document and e-mail it to one or more recipients.

Native Calls
GoAnywhere includes Tasks for calling
programs and
commands on System i, Windows, Unix and Linux. These Tasks can be
placed within Projects as part of an overall list of business processes
to perform.

GoAnywhere can call both System i commands and programs. When calling a
command, you can indicate the command library/name to execute and any
message ids to monitor for. When calling a program, you can indicate
the program library/name and its parameter types, lengths and usages
(input/output/both). Constant values or Project variables can be passed
into the parameters.
For instance, after retrieving some order files from a FTP server, you
may want GoAnywhere to call a program on the System i to process those
orders.
Execution
Projects can be executed using a variety of methods in GoAnywhere.
Within GoAnywhere's browser-based Administrator, authorized users can
execute Projects immediately with a click of the mouse. Projects can
also be scheduled to run at future dates and times using GoAnywhere's
built-in Scheduler. GoAnywhere's open architecture allows Projects to
be initiated from other systems on the IP network using the provided
RUNPROJECT command and program APIs.

Scheduler
Scheduler GoAnywhere includes a built-in scheduler
for
executing Projects at future dates and times. Projects can be scheduled
to run "one time" or can be scheduled on a variety of recurring
frequencies including every minute, every hour, every day, certain days
of the week, and every month.
When scheduling a Project, you can indicate the user and password to
run the Project under, the start date, frequency and any variables to
override within the Project. You can also indicate the email addresses
to be notified when a Project fails or completes normally.
RunProject
The included RUNPROJECT command can be
used to make
external requests to execute Projects within GoAnywhere. RUNPROJECT is
available at no additional charge and can be installed onto System i,
Windows, UNIX and LINUX platforms. The RUNPROJECT command can be run
from system command lines, scripts, programming languages and native
schedulers.
Since RUNPROJECT makes its requests to the GoAnywhere server using the
standard HTTP protocol, RUNPROJECT can connect from other systems on
the IP network. This allows a single install of GoAnywhere to service
multiple systems.
The RUNPROJECT command has several parameters which can be specified by
the user or application including:
- Name
of the Project to execute
- User
and password for authentication
- Host
name or IP address of the GoAnywhere server
- Port
number of the GoAnywhere server
- Variables
names and values to override in the Project
- Job
Queue priority
Job
Control
GoAnywhere provides enterprise features
to support the
most demanding environments, including job queuing, multi-threading (to
allow the concurrent execution of multiple projects), priority
settings, real-time monitoring and detailed logging. Listed below is a
flowchart describing how Projects are executed through GoAnywhere.
Project Execution Flow

Every execution of a Project is considered a "Job" in GoAnywhere. Each
Job is assigned a unique job number and has its own Job Log (containing
details about the execution of the job).
A Job initially starts in the GoAnywhere queue. When GoAnywhere is
ready to run the Job, it will advance the Job from the queue into an
active status. The Job's Project will then be compiled and executed by
GoAnywhere. When the job completes, the completion status (along with
any error messages) will be returned to the user or requesting
application.