GoAnywhere Gateway

GoAnywhere Proxy Gateway

 

 

GoAnywhere Gateway is an enhanced reverse and forward proxy that gives organizations an additional layer of security for exchanging data with trading partners. With Gateway, file sharing services can be kept safely inside your private network, without exposing sensitive data to your DMZ (Demilitarized Zone), and connections can be made to external systems on behalf of users in the private network.

 

What is a proxy gateway and how does it work?

 

Why GoAnywhere Gateway?

Alongside GoAnywhere Managed File Transfer, Gateway provides IT teams with many benefits:

 

• Secure inbound ports to your network

Your file servers (e.g., FTPS, SFTP, HTTPS, and AS2) can be kept securely in your internal network. This allows you to keep inbound ports to your network closed, which is essential for complying with data security standards like PCI DSS, HIPAA, HITECH, SOX, ISO 27000, and the GLBA.

 

• Keep critical data out of the DMZ

Files can be safely shared with trading partners, users, clients, and vendors while avoiding having critical documents or files stored, even temporarily, in your DMZ.

 

• Connect with external systems securely

As a forward proxy, Gateway can make connections to external systems on behalf of users and applications in the private network. This allows you to more easily manage file transfers from your firewall. Additionally, the identities and locations of your internal systems are hidden for better security.

 

• Run on any environment or operating system

GoAnywhere Gateway is a platform agnostic, software-only solution. Install it on Windows, Linux, AIX, UNIX, or other operating systems to enhance file security in whatever environment works best for you.

 

 

Reverse Proxy

GoAnywhere Gateway will masquerade as the same file-sharing services (e.g. FTP/S, SFTP, HTTPS servers) that it is front-ending for. When trading partners need to exchange data with your company, they will connect to GoAnywhere Gateway instead. GoAnywhere Gateway will then bind those requests to the appropriate services in the private network. Any additional data channels needed are opened from the private network and through GoAnywhere Gateway, again requiring no inbound ports.

 

Forward Proxy

GoAnywhere Gateway will make connections to external systems on behalf of users and applications in the private network. By rout- ing outbound requests through a centralized point with GoAnywhere Gateway, you will be able to more easily manage file transfers from your firewall. The forward proxy feature additionally hides the identities and locations of your internal systems for security purposes.

 

Quick GoAnywhere Gateway Features

• No incoming ports need to be opened into the private network
• User credentials, permissions, certificates, and keys are kept safe in the private network
• Hides the locations and identities of internal systems
• Services configurations are maintained/stored in the private network
• Supports FTP, FTPS, SFTP, SCP, HTTP, HTTPS and AS2 file transfer protocols
• Built-in load balancer to distribute workloads across multiple systems

In essence, when added to GoAnywhere MFT, GoAnywhere Gateway serves as a transparent interface between internal systems and external systems without exposing sensitive files or your private network.

 

 

GoAnywhere Gateway FAQs

 

What is GoAnywhere Gateway?

GoAnywhere Gateway is an enhanced reverse and forward proxy that provides an additional layer of network defense. It allows your trading partners to connect to GoAnywhere MFT without having to open inbound ports into your private network or store sensitive information in the DMZ. GoAnywhere Gateway also allows GoAnywhere MFT to connect to external systems without revealing the identities or locations of your internal systems.

 

Where should GoAnywhere Gateway be installed?

GoAnywhere Gateway should be installed on a machine in the DMZ (demilitarized zone), which is the "neutral zone" between your organization's private/internal network and the outside public network (internet).

 

Which platforms can GoAnywhere Gateway be installed to?

GoAnywhere Gateway can be installed onto Windows, Linux, IBM System p (AIX), UNIX, HP-UX, Mac OS and Solaris platforms.

 

Can GoAnywhere Gateway run in a VMware virtual environment?

Yes. HelpSystems is a partner with VMware. GoAnywhere Gateway has been tested and verified to run in a VMware virtualized environment. GoAnywhere Gateway has been awarded the "VMware Ready" logo.

 

Do I need to load any software on my PC?

No. All GoAnywhere Gateway functions are server-centric.

 

Which protocols does GoAnywhere Gateway support?

GoAnywhere Gateway supports popular protocols including FTP, SFTP (FTP over SSH), FTPS (FTP over SSL/TLS), SCP, AS2, HTTP and HTTPS.

 

Can GoAnywhere Gateway support multiple installations of GoAnywhere MFT?

Yes. A single installation of GoAnywhere Gateway can serve as a reverse proxy for multiple installations of GoAnywhere MFT. This allows you to simplify your network security while distributing file transfers over multiple servers.