Ipswitch MOVEit™ 7.5 – New Features and Enhancements

User self-registration provides a mechanism for unregistered users to initiate the secure sending of packages to registered MOVEit users, and for the registered user to securely respond. The unregistered user must have prior knowledge of the registered user’s proper email address. This feature includes administrator filtering capabilities, such as ‘send-to’ domain restrictions, number of recipients, IP address, and single vs. multiple orgs. This feature provides users with ‘self- provisioned’ access to the system.

MOVEit users will now automatically see themselves in their Ad Hoc address books, and will be allowed to include themselves in the recipient lists of messages they author and send.

A new license file option allows new installations of MOVEit DMZ to be licensed for Ad Hoc Transfer-only systems without the traditional MOVEit DMZ file transfer user interface. Ad Hoc Transfer-only licensing is only supported through new licenses using license files.

A new organisation-level flag has been added to disable everything except the Ad Hoc Transfer interface. This disables all file and folder access for end users and restricts administrators to only being able to download archived log files and reports.

You can customize the Outlook plug-in to add your own brand or organisation information to the user interface. You can change logos, icons, and text labels and you can also customize the associated help topics.

The silent install program has been enhanced to ease the deployment of the Ad Hoc Transfer Plug-in to large numbers of users, and also to support deployment via Group Policy. The changes include supporting installation on a PC for “all users” rather than for a single user, and specification of default install properties.

The default install properties allow an administrator to configure the plug-in to connect to the MOVEit server. To complete the configuration, each user will need to enter their MOVEit password (and possibly their username) . In most cases, after using the silent install or group policy, the username will be already configured on the end user’s computer.
Also, when using the Group Policy to deploy the plug-in, the installation program is now run by the “System” user, which fixes a defect in the previous version.
For more information, see the “Ad Hoc Transfer Plug-in for Outlook Install Guide,” on the MOVEit Support site.

System administrators may now configure individual organisations to optionally allow administrators only, or administrators and GroupAdmins to access user Ad Hoc packages and files. The allowed administrators will be able to list user mailboxes, list the packages in those mailboxes, and then read the packages and download the attached files. Such views and downloads will not affect any view or download limits, but will be audited and viewable to the sender and recipients.

When Package delivery notifications are configured to run at a time interval and not immediate, there was no way to create a custom notification. Custom notifications have now been created for HTML and TEXT formats for the delayed package notification email.

Guest Access (Package Password) users are now able to install the upload/download wizard.

Users may now choose to prevent any replies to an Ad Hoc package they send out, inaddition to the existing option to prevent replies to the entire recipient list (reply all).

A new licensing option allows new installations of MOVEit to be licensed with either unlimited number of users or a tier of users. User tier licensing is only supported through new licenses using license files.

The ability to set the maximum number of users, end-users and temporary users on an organisational level has been added.

Customers who have automated users, who access MOVEit via FTP/SSH frequently to look for new files, have a problem where the sign-on/sign-off records generated by these users will flood the audit logs (log table). This can cause serious performance issues and timeouts. A new user profile option lets full administrators prevent the logging of successful sign on/sign off events (over any protocol) for a particular user. The default will still be to log all events, successful or otherwise.

Under Settings – Security Policies – Interface – HTTP, there are now options to enable single sign-on functionality without requiring users to enter a username or manually import individual certificates and to choose which field in the certificate contains the user’s username (current options are CN and Subject Alternative Name). Appropriate messages are logged to the DMZ_Web log at ‘All Debug’ when certtouser.aspx is accessed to assist with troubleshooting.

Implemented support for the ZIP 64 file format in a common library, which affects the ZIP files in the /Archive/Packages folder, as well as the files generated by the ActiveX wizard‘s “Upload all files as one zip” option. Users must upgrade their ActiveX wizard to take advantage of this.

Previously, when using the group check mask and searching group objects for membership information, SyncLDAP did a query for all users in the specified path, even though it should only be interested in users who exist in particular groups. Especially when the auth source is set to search group objects for membership information, it is much more efficient and faster to first query for group objects matching the specified mask, then obtain a list of users. Customers who have a large number of users will especially benefit from this improvement.

MySQL, the database distributed with MOVEit has been upgraded to the latest release version, 5.1.63. Using MySQL 5.0 with MOVEit version 7.5 and above is not supported.

The popup address book available when composing adhoc packages has been improved to better support large address books.

The propagation of folder settings has changed to propagate only the values that have been changed. This should mean better performance on systems with large numbers of folders.

Appearance and consistency of buttons within MOVEit DMZ have been improved.