EFT Specifications

This topic is intended as a quick reference of EFT specifications. The information is provided in detail in the applicable procedures.

Item

Description

Protocols allowed

FTP/S (SSL/TLS), SFTP (SSH2), HTTP/S, and AS2 (Certain protocols require optional modules and/or EFT Enterprise.)

  • FTP Commands Supported by EFT

  • The FTPS protocol in EFT is compliant with RFC4217, "Securing FTP with TLS."

  • EFT supports SFTP versions 2, 3, 4, and 6. The outbound client defaults to version 4, and it is not configurable through the GUI, but can be configured in the registry. The EFT outbound client negotiates the SFTP version with the receiving server during session establishment. That is, if the receiving server only supports version 2, EFT Server will negotiate down and operate at version 2.

  • SFTP hashing algorithms supported: MD2, MD4, MD5, Haval, RIPE-MD, SHA-1, SHA2, SHA-Double, Tiger

SSL version

EFT version 7.3.6 and later use OpenSSL 1.0.2k

EFT version 7.3.3 uses OpenSSL 1.0.2.j

EFT version 7.3.2 uses OpenSSL 1.0.2h

EFT version 7.3.0 - 7.3.1 use OpenSSL 1.0.2f

EFT version 7.2.9 uses OpenSSL 1.0.2k

EFT version 7.2.6 uses OpenSSL 1.0.2.j

SSL Certificate Key lengths supported

Key lengths supported: 1024, 2048, 3072, and 4096 bits

EFT-created SSL certificates

x.509 base-64 standard DER encoded

Allowed OpenSSL ciphers for inbound transfers (HTTPS and FTPS)

Refer to the Server > Security tab for available ciphers.

Authentication types

Globalscape, AD/NTLM, LDAP, ODBC

Log formats

W3C, Microsoft IIS, and NCSA

OpenPGP version

EFT v7 and later use IP*Works! OpenPGP v9 PGP libraries (http://cdn.nsoftware.com/help/IG9/cs/OpenPGP.htm) and is RFC 4880 compliant.

FIPS

In EFT v7.3.6 and later, EFT uses the OpenSSL FIPS Object Module.
https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/1747

PCI DSS

EFT version 7.x and later facilitate compliance with PCI DSS version 3.x.

  • PCI DSS v3.0 was released in November 2013

    • Supported in EFT v7.0 and later

  • PCI DSS v3.1 was released in April 2015

    • Supported in EFT v7.1.2 and later

  • PCI DSS v3.2 was released in April 2016

    • Supported in EFT 7.2.4 and later

AS2 module

EFT uses /n software's IP*Works EDI Engine, in compliance with RFC4130. The maximum inbound file size for AS2 transfers is 20GB; there is no limit on outbound file size.

Maximum Capacity for EFT

Listed below are several EFT object types and the maximum number of each type (both theoretical maximum and tested maximum) that can be defined in EFT. Keep in mind that an excessive number of total objects displayed in the administration interface can affect the responsiveness of the interface.

EFT Object

Theoretical Maximum

Tested Maximum

Maximum number of Server Groups

32,768

maximum not tested

Maximum number of Servers (EFTs)

32,768

10

Maximum number of Sites

2,147,483,647

40

Maximum number of Settings Templates

2,147,483,647

maximum not tested

Maximum number of users per Server

2,147,483,647

maximum is set per Site

Maximum number of users per Site

2,147,483,647

150,000

Maximum number of users per Settings Template

2,147,483,647

maximum is set per Site

Maximum number of users per Permission Group

2,147,483,647

maximum is set per Site

Maximum number of administration accounts

2,147,483,647

1,000

Maximum number of Permissions (on VFS tab)

2,147,483,647

maximum not tested

Maximum number of VFS entries

2,147,483,647

150,000

Maximum number of Permission Groups

2,147,483,647

maximum not tested

Maximum number of Folders (VFS)

2,147,483,647

See VFS entries maximum

Maximum number of Folders (WTC/Workspaces)

browser dependent

1,000 folders/files

Maximum number of characters in a directory path

Windows dependent

255 (limitation includes the drive letter, colon, backslash, directories, subdirectories, filename, and extension)

Maximum number of Event Rules

65,536

4,000 Folder Monitor Event Rules

Maximum number of Commands

65,536

maximum not tested

Maximum number of AWE tasks

65,536

maximum not tested

Maximum number of Custom Reports

65,536

maximum not tested

Maximum number of pages in a report

2,500

2,000

Maximum number of simultaneous connections

65,536

1,000

Note: Object type distribution for baseline and testing purposes was roughly 80% users, 10% Folder Monitor Event Rules, 5% other Event Rules, 2.5% AWE tasks, 2.5% other.