Training
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Contact Sales
Contact Sales

1. Executive Summary GlobalSCAPE (now part of HelpSystems, now Fortra) is renowned for its managed file transfer (MFT) solution, Enhanced File Transfer (EFT) . A critical component of EFT's security architecture is its integrated firewall and DMZ gateway , often referred to as the DMZ Gateway or Edge FTPS/HTTP Proxy . This report analyzes the firewall capabilities of GlobalSCAPE EFT, focusing on its role in securing inbound connections, protocol proxying (FTP, FTPS, SFTP, HTTP/S), and network segmentation.

Mid-to-large enterprises requiring audited, DMZ-separated MFT with support for legacy FTP and modern SFTP/HTTPS. Document Version: 1.0 Last Updated: 2025 Based on: GlobalSCAPE EFT v8.x architecture (HelpSystems/Fortra)

Unlike traditional network firewalls, GlobalSCAPE’s firewall component operates at , acting as a reverse proxy and protocol validator. 2. Architecture & Components The GlobalSCAPE EFT firewall architecture typically consists of three logical zones:

| Component | Location | Function | |-----------|----------|-----------| | | DMZ | Terminates external client connections (FTP/S, HTTP/S, SFTP). Validates protocols. Proxies traffic to internal EFT server. | | Internal EFT Server | Corporate LAN | Stores user accounts, auditing logs, automation rules, and backend storage (disk, cloud). | | Database (SQL) | Internal LAN | Stores configuration, user metadata, and event history. |