Hermstedt Stingray » Secure File Transfer

I have an FTP server, why should I invest in a StingRay?

October 27th, 2011

So, you have an FTP server and want to know why you should invest in StingRay? OK, here’s a quick summary of the key reasons why this would be a valuable investment;

How it began…

The basic evolution of graphic arts and prepress file transfer requirements have seen a movement away from data being couriered on disks and drives, to multi-channel ISDN with FTP - the solution of choice since the early 21st century.

The problem with basic FTP…

FTP has served print companies well over the years but now customers are demanding easier, more intuitive ways of sending and sharing files.  Customers and internal users struggle with FTP clients, invariably having to involve IT departments to either install software or open ports on firewalls.  On the whole, FTP just isn’t a user-friendly way for your customers to share files with you.

As businesses strive for greater efficiency and a more cohesive approach to business processes, FTP has become a weak link - adding little value with it’s lack of integration potential.

The Future - Hermstedt StingRay

Hermstedt StingRay has been built specifically with the file transfer requirements of creative companies in mind.  Whilst able to provide continued support for those customers wishing to use FTP, StingRay also provides an alternative range of features and file sending options which go above and beyond that of traditional FTP. They help to increase efficiency, streamline productivity and improve the bottom line.

Web Browser file transfer for you and your customers

Your customers will be familiar with web browsers, most are undoubtedly using them on a day to day basis. They are intuitive and StingRay utilises them to provide a simple interface for file upload and download, minimising IT involvement.  Coupled with unlimited file volumes, concurrent connections and user accounts (the only limit is the size of the file upload at 2Gb) - StingRay’s Web Browser option is a great way of transferring files.

External Web Interface

Branding Options

StingRay raises brand awareness with your customers and their trading partners more readily than FTP. It’s Web Browser interface can be customised to reflect your companies look and feel, and to provide personalised customer details upon login.

Multiple File Delivery Options

StingRay offers a range of file delivery options over and above FTP.  In addition to it’s ability to behave as a traditional FTP server, StingRay provides secure customer specific locations where files can be uploaded to or downloaded as required.

Files received:

Files can be received in a variety of different ways. These include FTP, HTTP(s), Email attachment and Leonardo-IP (a StingRay to StingRay protocol).  Specific actions can be triggered when customers upload files, such as email notifications to internal and external users and the forwarding of files to workflows, file servers, RIP’s or DAM’s.

Files sent:

With StingRay’s user-friendly client application, your internal users can send files by simply selecting their recipient from a centralised address book or typing their email address into a Quicksend window. You can give your customers the option to receive files directly into their preferred file transfer system OR, download them by clicking on a dynamically created hyperlink in an email. As with files received, a range of email notifications options can be setup to alert internal and external users when a file has been sent or downloaded.

StingRay Client - Quicksend

Centralised tracking and logging

The great thing about StingRay is, however your customers choose to submit files - they arrive into one central location! All jobs can be monitored via StingRay’s desktop client application (available for both Mac and PC) and files can be previewed remotely and downloaded directly to the desktop. More importantly, this means it’s easy for users to centrally manage, administer and keep track of vital job information whilst StingRay maintains a full audit trail.

Security

StingRay’s secure file transfer options and auditing features can help your business to achieve PCI compliance and conform to the security criteria outlined in the Data Protection Act. It’s numerous security provisions minimise the risk of a data breach, safeguarding your business from potential fines and penalties.

Workflow Integration

Driven by customer demand (and we always listen to our customers), StingRay now integrates seamlessly with any XML compliant solution. It uses customisable web forms to capture unique job details upfront and then forwards this information into the workflow as an XML job ticket. In turn, this information is used to automate the passage of files through your internal systems, giving you the time you need to add value to your business.

Job Ticket Web Form

XML Job Tickets

StingRay’s XML job Tickets now use regular expressions, improving the quality of the data submitted to your workflow and increasing the scope of integration and automation that can be achieved.

Your existing FTP server may help you to get files into and out of your business, but does it offer you the same ease of use and the enhanced levels of flexibility, security and central management that StingRay does? Even less likely, does it have the potential to integrate with your existing technologies, helping you to further automate your internal processes?  If not then your missing out on the opportunity to streamline your business, boost productivity and free time that can be devoted to adding that all important personal touch to your customer service.

Saying this, we do understand that the current financial climate means that we are all tightening our belts.  That’s why we’ve put together the following ROI calculator to show you the cost saving StingRay can bring to your business.

Configuring HTTPS file transfer on Hermstedt StingRay provides industry standard security

September 6th, 2011

Having recently spoken to a number of existing customers about recent functionality added to StingRay it appears that many are unaware of the ability to configure StingRay to allow for secure file transfer using the HTTPS protocol.

HTTPS has been an option in StingRay since April 2010 but with the increased awareness around data security we’re finding more StingRay users want to ensure that they are able to comply with, for example, the Data Protection Act and also PCI DSS.

HTTPS provides for a secure encrypted tunnel for the transfer of data ensuring that sensitive data can be transferred over the Internet without the risk of being intercepted which isn’t the case when using standard unsecured protocols such as FTP or HTTP.

HTTPS file transfer using Hermstedt StingRay

HTTPS file transfer using Hermstedt StingRay

If you would like to set up HTTPS on your StingRay our support department will be willing to assist. Please click here to find out the process in our FAQ and then contact Support using the normal contact details.

Secure file transfer using HTTPS with your StingRay

August 18th, 2010

In previous posts we’ve mentioned that you’re able to improve the security of your StingRay with the implementation of an SSL certificate.  We’re happy to say that a number of customers have taken up this option and are now able to provide secure file transfer for both HTTPS file upload and file download, in addition this extra security level is also then utilised in the Email Hyperlink file sending option.

Example of HTTPS enabled StingRay server

Example of HTTPS enabled StingRay server

If you would like to provide this extra level of security for your customers, you’ll need to purchase an SSL certificate from one of the major suppliers and arrange for us to securely update your server with the certificate.  In the example above you can see this customer has not only secured their server, but done a great job of customising the interface and have set up an A-Record* to make it even more simple for their customers to upload files.

*A-Record - is the server name, in this case ’stingray’, in front of their domain name which forwards to the external address IP of the StingRay or firewall/router.

SSL Certificates and StingRay

June 4th, 2010

Since we released version 2.6 of StingRay file transfer server we’ve had a great uptake in those customers wanting to provide additional security for their customers when sending/receiving files, i.e. using HTTPS via a web browser.

Given that understanding SSL Certificates and the differences between self assigned and those purchased from a reputable supplier isn’t necessarily straight forward, I thought I’d provide you with a brief outline here.

Filling in the site information page as instructed in the ‘New Features in 2.6 Guide‘ will enable your StingRay to generate a Self Assigned SSL Certificate.  This certificate will provide you and your users with the ability to use SSL to upload and download files via a web browser.  You’ll also need to switch on HTTPS in the Network Configuration page under Web Access otherwise the StingRay will continue to use standard HTTP.

Now that you have SSL enabled you’ll be able to securely share files, but there is one major drawback with Self Assigned certificates - recent web browsers don’t trust them and flag it up to the user, in some annoying cases too often.

Internet Explorer doesnt like self assigned SSL Certificates

Internet Explorer doesn't like self assigned SSL Certificates

Obviously when providing a solution for your customers, staff, branch offices etc to send you files you don’t want any barriers in the way or more to the point to look like you don’t know what you’re doing.  In this case you’ll need to purchase an SSL certificate.  StingRay’s external web interface runs on Apache Server so we’d recommend if you want to purchase a certificate you do so from one of these preferred SSL Certificate suppliers.

Once you have this certificate you’ll need to contact us to assist you with uploading it into your server as there currently isn’t an option to upload your own through the web interface.  As a maintenance customer you’ll get this service free of charge - for other customers this will be provided as part of your 2.6 upgrade.

Whilst we’re on the point of creating the certificates its worth pointing out that you’ll need to register it to a host name.  Many people set up host names (or A records) for their StingRay as people better understand and remember names than IP addresses, for example our StingRay is accessible by both http://217.36.243.171 and http://stingray.pro2col.com but the later is much easier to remember.

You can pretty much use whatever host name you want but we generally recommend using stingray.domain.com.  Its really important to make sure that when you’re doing this you DON’T use the host name ftp.domain.com as this will cause most web browsers to think that you want to use FTP and result in the web browser doing something like this below, rather than presenting a nice graphical interface for you to transfer files.

FTP protocol through a web browser

FTP protocol through a web browser

I hope this helps you to understand a little better how to get the best out of your StingRay.  If you’ve got any questions make sure you give our sales or support teams a call on +44 (0) 333 123 1240.

Managed File Transfer - does this signal the end of the FTP server?

January 8th, 2009

I read with interest yesterday an article by Meg Suggs about Managed File Transfer.  To paraphrase the article Meg suggests that “Managed File Transfer is replacing FTP servers” as the solution of choice.

It got me thinking about what it was about Managed File Transfer that businesses wanted or needed?  First off Managed File Transfer is defined by Wikipedia as:

Managed File Transfer (MFT) refers to software and hardware technologies that enable “secure and reliable exchange of documents between organizations.” In broader terms, Managed File Transfer suites enable organizations to automate, manage and secure the exchange of large volumes of data between two or more entities.”

So why the shift to Managed File Transfer?  Well I think Wikipedia sums it up pretty clearly, its a way of providing a little more management, automation and security throughout the file transfer process than you’d achieve with a standard FTP server or email for that matter.

Interestingly Meg also referred to an article written early last year about the inadequacies of standard FTP servers and how “an illegal database containing more than 8,700 stolen File Transfer Protocol server credentials including usernames, passwords and server addresses was found. The stolen information belonged to companies from around the world and the database allowed for anyone to purchase those credentials and use them to launch malicious attacks against the compromised systems”.

With information readily available on the Internet providing individuals with the opportunity to create havoc and bring down complete company IT infrastructure it begs the question, why do companies take the risk by implementing cheap file transfer solutions when the potential cost to their business is so huge?

In addition to the security considerations the business process should also be taken into account.  Long gone are the days when file transfer was a standalone function.  File Transfer should be fully intergrated with other processes within the business providing greater automation and efficiency.  As file transfer becomes more integrated its even more important that the information transmitted and stored is done so securely.

For those interested StingRay Managed File Transfer Server ticks all of the boxes and more information can be read here.