These five new features in MOVEit 2018 Service Pack 1 will increase the speed and security of your business' automated file transfer workflows. There are also new improvements to MOVEit's REST API!
Recently, Ipswitch announced service pack 1 of their flagships managed file transfer services MOVEit Automation and MOVEit Transfer 2018. This service pack fixed some bugs and added some cool features that I thought would be worth sharing with everyone.
Bulk Download in MOVEit Transfer
Prior to MOVEit Automation 2018 Service Pack 1, if you wanted to download multiple files in Transfer, you were forced to click Download for every…single…file. No more! Nowadays, you are provided with the simple checkbox to the left of each file and an option to download (or delete) all selected files at once.
TempUser Account Reactivation
Another feature introduced with SP1 is the ability for non-admin “sharers” to re-activate temp users once they are expired. Security is always best implemented via the least privilege mindset meaning you should never need to have more permission than what you need to do the job. Now, with SP1, granting rights to share folders with temporary users and re-activate them can be accomplished by non-admins.
REST API Improvements
Being a big automation fan, I love to write scripts to perform various actions rather than using a UI. In 2018, Ipswitch introduced a much-improved REST API coming from their old COM API. But with SP1, the REST API support got better!
You now can perform actions via the API like modifying user and group permission to folders, enumerating users in groups, getting the contents of a folder and more. Here’s a complete breakdown:
New Swagger UI Client
Along the same lines as the REST API improvements, SP1 has also brought us a better Swagger UI client. Swagger is not new to MOVEit since MOMEit Automation had this introduced in the last release, but MOVEit Transfer is now finally catching up with the Swagger abilities. The new Swagger client allows you to browse the REST documentation, build and test various API calls on the fly and everything else that comes with the intuitive Swagger UI.
It’s worth mentioning the addition of secure response HTTP headers. Headers such as Content-Security-Policy, HTTP-Strict-Transport-Security, and cross-site scripting protections have been added, by default. MOVEit Transfer 2018’s web UI was pretty safe beforehand, and now, by using these security HTTP headers, it has increased security.
Finally, you also have the option to remove formula operators when exporting CSVs. Since a CSV file is just a text file, typically this isn’t a problem, but creative attackers have somehow figured out a way to launch attacks via specially crafted code when opened in Excel.
As of SP1, you no longer have to worry about this.
If you haven’t upgraded to SP1 yet, I highly encourage you to do so. SP1 brings not only these features but also addresses customer reported issues as well. For more information about the Transfer 2018 SP1 release, check out the official release notes.