1. technology and computing
2. networking
3. vpn and remote access

Tumbleweed SecureTransportTM
SecureTransportTM is the leading enterprise secure file transfer solution. Designed to meet
the needs of all types of users and any size organization, it provides support for interactive
and automated delivery with a wide range of server and client platforms—from Web
browsers to thin and thick clients. SecureTransport has enhanced file transfer capabilities
across industry standard protocols including HTTP, HTTPS, FTP, and secure FTP
(FTP/SSL).
FEATURES
n File transfers over FTP and HTTP
n SSL/TLS data security
n Guaranteed file delivery
n Mid-file transfer recovery
n Strong file integrity checking
n
As a single, integrated platform offering a complete enterprise-level file security solution,
SecureTransport provides many advanced capabilities such as guaranteed delivery and
data integrity, secure DMZ proxy, flexible enterprise authentication, repository encryption,
and strong auditing. It further incorporates a rich set of application integration capabilities,
including event-driven agents and a rules-based framework for file processing and routing.
SecureTransport is used by 8 of the top 10 banks to serve tens of thousands of corporate
customers. It forms the core of many financial networks, links numerous healthcare
providers, payors, producers, and clearinghouses, and provides secure file transfer infrastructure for numerous enterprises and government organizations.
Whether you’re moving a million dollars or a million-transistor chip design, electronic transactions and data need to be delivered securely and reliably. Traditionally, transferring files
between remote locations or different organizations has meant relying on leased lines or
Value-Added Networks (VANs). But the cost and complexity involved has fueled a move
away from these dedicated infrastructures, as organizations are increasingly exchanging
EDI files and sensitive data using the Internet and their own IP networks. Many of the
world’s leading banks, insurers, government agencies and Fortune 500 companies trust
Tumbleweed SecureTransport to securely and reliably transfer files between their back-end
applications, remote offices, customers, partners and suppliers.
n
n
n
n
n
n
n
Multi-gigabyte file size support
Efficient automation and scheduling
Firewall-friendly architecture
Intuitive interactive interfaces
Signed audit records
Flexible authentication
Portal integration and branding
Enterprise class architecture
BENEFITS
n More reliable than FTP and email
n Internet and DMZ data protection
n Transparently encrypts stored data
n Cuts private network/VPN costs
n More efficient file processing
n
n
n
n
Delivers demonstrable, quick ROI
Eliminates need for paper proof
Strengthens regulatory compliance
Lowers Total Cost of Ownership
“By leveraging the Internet to reduce administrative
overhead, decrease cycle time and minimize errors,
SecureTransport allows us to deliver more services
for each dollar spent.”
Paul Mitchell, Project Manager, Blue Cross and Blue Shield of Kansas City
Secure file transfer over the Internet and private IP networks
Tumbleweed SecureTransport is an enterprise-class solution for transferring data securely and reliably over the public Internet or private IP networks. It provides secure access and data transfers using a Web browser, a wide-range of platform-specific clients, and
secure applications. It can be deployed more quickly than a VPN solution—with lower Total Cost of Ownership (TCO)—and furnishes
a more comprehensive range of enterprise-class features, including:
n
n
n
n
n
n
n
n
n
n
n
n
n
n
Integrated enhanced file transfer with multi-client/multi-protocol capabilities
Support for both FTP/S and HTTP/S protocols for secure data transfer
Secure DMZ streaming to prevent storing sensitive data in the DMZ
The strongest levels of authentication and encryption available
Strong audit trails for non-repudiation and proof management
Guaranteed delivery and data integrity with retransmits for failed transfers
Reliable transfer of very large files with checkpoint/restart
Scheduled batch transfers for unattended file delivery
Thin and thick clients deployable across a wide range of operating systems
Integration with many authentication systems, including LDAP, SSO and PKI
Event-driven agents and rules-based file processing and routing framework for application integration
Distributed deployment architecture for high availability and performance
Push and pull data delivery with centralized partner management
Rapid deployment services
Secure Data Delivery Features
Client/Server
File Transfer
SecureTransport
enables secure,
reliable file transfers
using a web browser;
a wide range of
SecureTransport
clients for Windows,
UNIX, Linux, z/OS
and OS/400; and
third-party secure
FTP clients.
Guaranteed
Delivery and Data
Integrity
SecureTransport
extends the industrystandard FTP and
HTTP protocols with
enterprise-class
reliability features,
including post transmission integrity
verification, mid-file
recovery, and
automatic restart.
Authentication and
Authorization
SecureTransport
supports password,
PKI, smartcard, and
other authentication
schemes. User profiles
can be managed internally, or externally
through LDAP,
ActiveDirectory, and
Single-Sign-On.
Tracking and
Auditing
Secure data delivery
requires strong audit
trails for tracking and
proof management.
SecureTransport’s
transfer audit
subsystem supports
log files, signed MDN
receipts (RFC 2298),
and external logging
APIs.
Data Protection and
Encryption
SecureTransport
meets enterprise
data protection
regulations for the
DMZ (e.g. HIPAA and
GLBA) using its
application proxy
architecture and/or a
transparently
encrypted file
repository.
Enterprise
Authentication
Infrastructure:
LDAP/AD
SSO
PKI
Authentication
Agent
http and https
SecureTransport
Application Proxy
SecureTransport
Data Management
Server
ftp and ftp/s
Administration Server
http/s
Hardened HTTPD
Server
ftp
secure ftp
(RFC2228)
Hardened FTPD
server
firewall
Tumbleweed
Tumbleweed
Software Clients
Third
PartyClients
Software
Clients
Secure,
authenticated
connection
http
Hardware Signing
Modules
Data Management
Server Connector
Web
Browser
Secure Data Transfer
Services
Enterprise
Applications
and
Processes
Enterprise Transaction
Manager
firewall
Tumbleweed
Tumbleweed
Software Clients
Tumbleweed
Software Clients
Software Clients
Signed
Audit
Records
SecureTransport Server Family
Applications
Tumbleweed’s SecureTransport product family includes a wide range of server offerings
designed to suit the varied needs of customers.
BANKING AND FINANCE
n Treasury/Cash management
n ACH/Wire/SWIFT payments
n Lockbox & remittance data
n Payroll & tax services
n Positive pay files
n P-Card transaction reporting
n Distributed check image capture
n Check image archive services
n Bulk payments clearing & settlement
n Securities trade & custody
n Regulatory brokerage reporting
n Trade finance documentary collec-
The SecureTransport Standard EditionTM provides secure data delivery with agent-based
integration infrastructure and user-based licensing. Secure data transfer with guaranteed
delivery and checkpoint/restart is supported over FTP, Secure FTP, HTTP, and HTTP/S protocols. Event-driven agents, which can be triggered on 33 distinct application events, furnish
a customization framework for enterprise authentication, entitlements, and application integration.
The SecureTransport Enterprise EditionTM server incorporates the advanced features typically required by large enterprises and includes an unlimited user license tier. Key features
integrated in the Enterprise Edition server include:
n
n
n
n
n
Application Proxy: streams data through the DMZ and protects sensitive data from
snooping attacks. Authenticates user connections and validates commands for protocol
conformance.
Transaction Manager: simplifies automation and application integration with a rules
engine, a Web Rules Editor and built-in Java environment. Agents benefit from higher
performance and greater scalability.
Signed Audit Records: signed MDN digital receipts for all transfers provide non-repudiation and long-term proof.
Repository Encryption: encrypts all files on disk at the server transparently to endusers.
Hub Manager: manages SecureTransport Partner EditionTM Gateways and Clients, provides bi-directional transfers, initiated via scheduler and folder watcher.
tion
HEALTHCARE AND INSURANCE
n HIPAA EDI
n Claims processing
n Payment advisories
n Member administration
GOVERNMENT SERVICES
n Healthcare services
n Benefits administration
n
n
The SecureTransport Partner Edition works with the SecureTransport Enterprise Edition
Hub Manager to provides secure reliable file transfers from the hub to a spoke and from a
spoke to the hub. Its managed registration process sets up mutually authenticated connections between each partner and the hub; defines application-specific mailboxes for bi-directional transfers; manages guaranteed delivery, data integrity checking, full SSL security, and
automation for file routing and processing; and consolidates logging for community-wide
auditing and reporting. The Partner Edition is easy to manage and deploy—either as a single-user or application end-point, receiving incoming files from the hub and monitoring new
files in the designated mailbox folders for delivery to the hub. You can also deploy it as a
multi-user gateway with full remote client access for downloading incoming files and uploading outgoing files.
n
n
n
Tax & wage reporting
Distributed data consolidation
Procurement
Payments & cash management
eGovernment services
ENTERPRISE INFRASTRUCTURE
n Supply chain EDI
n
n
n
Payments
Collaborative design
Software distribution
SecureTransport Clients
Some of Our Customers
SecureTransport provides thin and thick clients for diverse needs. For environments where
clients are not practical, it provides support for Microsoft Internet Explorer and Netscape
Navigator, allowing users to communicate using HTTP or HTTP/S and navigate via customized HTML screens.
BANKING & FINANCE
ABN AMRO Bank
ADP
Alliance Data Systems
AXA Financial
Bank of Montreal
Bear Stearns
Deutsche Bank
JPMorgan Chase
MasterCard
NASD Production Services
Wells Fargo Bank
Internet Explorer users benefit from added reliability and efficiency provided by the
SecureTransport ActiveX Control, which provides guaranteed delivery and auto-restarts,
data integrity verification, and mid-file recovery with checkpoint/restart.
Platform-specific clients for Windows, UNIX, MVS(OS/390 and z/OS), and IBM iSeries
(OS/400) permit users to securely and reliably transfer data over FTP/S or HTTP/S, even
through a firewall or proxy server. Users can transfer files interactively, via scheduled batch
transfers, or application scripts with full security and reliability, even over unstable network
connections or dial-up lines with guaranteed delivery, data integrity, and checkpoint/restart.
SecureTransport provides a fully functional GUI client for Windows. Users can select files
and folders in a Windows Explorer-like interface, drag and drop files for transfer s between
the server and the local disk, set up schedules for ad-hoc or recurring transfers, and view
the status of any transfer in a transfer queue window. It also provides multiple connection
profiles with pre-set attributes for each connection.
A command-line client for UNIX runs on Solaris, HP-UX, AIX and Linux. It provides a full
range of core features and can be used interactively, incorporated into scripts, or used for
automated, unattended transfers using the UNIX icon scheduler.
For OS/390 and z/OS, the SecureTransport client secures data transfer to and from IBM
mainframes in a reliable manner. It supports both binary and ASCII/EBCDIC file transfers
over FTP/S and HTTP/S with SSL authentication and guaranteed delivery over internal IP
networks or the Internet.
The SecureTransport AS/400 client for the IBM iSeries similarly provides guaranteed delivery of data and checkpoint/restart capabilities over FTP/S and HTTP/s protocols for users
and applications.
California, USA
Corporate Headquarters
Tumbleweed Communications Corp.
700 Saginaw Drive
Redwood City, CA 94063
Phone: 650-216-2000/800-696-1978
www.tumbleweed.com
New York, USA
Tumbleweed Communications Corp.
14 Wall Street, 12th Floor
New York, NY 10005
Phone: 212-791-9450/800-696-1978
www.tumbleweed.com
United Kingdom
Tumbleweed Communications UK
Hurst Grove, Sandford Lane
Hurst, Berkshire RG10 0SQ
U.K.
Phone: 44-118-934-7100
www.tumbleweed.co.uk
HEALTHCARE & INSURANCE
AdvancePCS
AON
Blue Cross Blue Shield of Florida
Group Health Cooperative
New York Life Insurance
WebMD Envoy
GOVERNMENT ORGANIZATIONS
California Health and Human Services
Connecticut Dept. of Labor
LA Department of Mental Health
State of Washington
Singapore Central Providence Fund
US Navy Surface Warfare Center
ENTERPRISES
General Motors
Harrah’s Entertainment
Johnson & Johnson
Sears Roebuck and Company
Singapore Airlines
Symantec
Verizon
© 2004 Tumbleweed Communications Corp. All
rights reserved. Tumbleweed is a registered
trademark and Tumbleweed SecureTransport,
SecureTransport Standard Edition,
SecureTransport Enterprise Edition and
SecureTransport Partner Edition are trademarks
of Tumbleweed Communications Corp. All other
brand names are the trademarks of their respective owners. 01/04 1000