[new] | Globalscape Firewall

Mid-to-large enterprises requiring audited, DMZ-separated MFT with support for legacy FTP and modern SFTP/HTTPS. Document Version: 1.0 Last Updated: 2025 Based on: GlobalSCAPE EFT v8.x architecture (HelpSystems/Fortra)

1. Executive Summary GlobalSCAPE (now part of HelpSystems, now Fortra) is renowned for its managed file transfer (MFT) solution, Enhanced File Transfer (EFT) . A critical component of EFT's security architecture is its integrated firewall and DMZ gateway , often referred to as the DMZ Gateway or Edge FTPS/HTTP Proxy . This report analyzes the firewall capabilities of GlobalSCAPE EFT, focusing on its role in securing inbound connections, protocol proxying (FTP, FTPS, SFTP, HTTP/S), and network segmentation. globalscape firewall

Unlike traditional network firewalls, GlobalSCAPE’s firewall component operates at , acting as a reverse proxy and protocol validator. 2. Architecture & Components The GlobalSCAPE EFT firewall architecture typically consists of three logical zones: A critical component of EFT's security architecture is

| Component | Location | Function | |-----------|----------|-----------| | | DMZ | Terminates external client connections (FTP/S, HTTP/S, SFTP). Validates protocols. Proxies traffic to internal EFT server. | | Internal EFT Server | Corporate LAN | Stores user accounts, auditing logs, automation rules, and backend storage (disk, cloud). | | Database (SQL) | Internal LAN | Stores configuration, user metadata, and event history. | and backend storage (disk