Understanding Managed File Transfer: Moving from Chaos to Control Dave Butcher Director MFT Product Marketing Script multi-enterprise…with examples | © 2011 Axway | All rights reserved.

Agenda Axway Overview File Transfer Challenges and Patterns MFT Best Practices | © 2010 Axway | All rights reserved.

Axway Overview | © 2009 Axway | All rights reserved.

About Axway Integration B2B Security MFT 11,000 customers Company 11,000 customers 1,600 employees HQ in Phoenix, AZ USA Offices in 20+ countries Industry-leading technology in Managed File Transfer (MFT) B2B and Integration Email and Identity Security Integration B2B Security MFT | © 2011 Axway | All rights reserved.

Gartner: Outlook On MFT / B2B Recommendations Governance for midsize to large MFT deployments. Look for a combination of proprietary & open source… Point solutions when speed of deployment is key. - standards, policies, architectures, consider strategic…. Ad hoc Outlook & Lotus Notes plugins… | © 2009 Axway | All rights reserved.

File Transfer Challenges and Patterns | © 2009 Axway | All rights reserved.

The File Transfer Challenge Complex data routing requirements Decentralized administration and maintenance Constantly modifying script (adds/changes/deletes) Resource intensive to add applications and user interfaces | © 2011 Axway | All rights reserved.

FTP Across the Enterprise Internet FTP Clients Scripts FTP Server FTP Clients Scripts Remote Internal Locations (Store to Corporate) Problems: Compliance & audit concerns Data “black holes” Limited reporting Change management issues No centralized control No centralized visibility Process breakdowns Administrative burdens Batch orientation Security Encryption Authentication Data at rest External to Enterprise (Supply Chain) Internal to Enterprise (Shared Applications) FTP Server Internal Gateways (Business Units) FTP Server FTP Clients Scripts | © 2011 Axway | All rights reserved.

Application Integration Pattern Internal File Movement Between Systems Peer-to-Peer / File Bus Hub and Spoke Automated and Process Driven Centralized Governance Multi-Platform Considerations Do you have visibility to the data? (i.e., more than system monitoring) Are your internal systems secured? (at a minimum  no FTP) BT “Exact Project” – Telco– Transfer – File Bus implementation – 6000+ nodes Fed Reserve – Government – ST - Application Integration Hub ING internal exchange project - Bank - Transfer CFT - 200+ nodes on multiple OS (Z/Os, Unix, Windows, Non Stop Kernel, Os400) SFR - Telco - Transfer CFT - 150 nodes + XFB Gateway EDF - Energy - Transfer CFT (Hundreds installation - references should be found)

Multi-Site Integration Pattern File movement between systems across sites (hub/spoke or peer to peer) Centralized governance and site management Automated and process driven Broadcast/Collect Multi-platform considerations Publix – Grocery/Retail – Transfer – Corporate to store use case. SFD - Telco/Retail - Transfer CFT + Gateway + Sentinel - Corporate to store and aggregating data from store Carrefour - Retail - XFB Gateway as Hub file platform (more than 1 million transfer per day) Total - Oil provider - Energie - Transfer InterPel + Gateway - Exchanges between Corporate and Subsisdiaries Deploy and manage multiple connections (efficiently) Automate, Automate, Automate

Move Files Internally with Control and Visibility Corporate Network Centralized Governance A2A Operations Axway Trusted File Axway Trusted File Axway Trusted File Supervise Others Mainframe UNIX Monitor Events Configure Repository Axway Transfer CFT -File Bus- Corporate LDAP/AD Access PKI Windows Linux Web SSO Remote Networks Axway Trusted File Axway Trusted File FT Acceleration IPv6 Scalable Governance Native Sentinel Heartbeat Scalable Governance – FT Acceleration | © 2011 Axway | All rights reserved.

Business to Business (B2B) Pattern Connecting with other organizations Standards driven Context aware Community and partner lifecycle management are essential Automated and process driven Flexible security Often requires data services Validation Transformation Routing Are your current tools able to address your needs? Do you have the business involved to help manage your trading community? Wells Fargo – Wholesale Banking – Gateway XFB– “Shared Transmissions Platform” (note also using Transfer for A2A) Vanguard – Fin Svcs – Gateway Interchange – Fidelity – fin Svcs – Gateway Interchange – “ Shared Data Transmissions Platform) Jabil – High Tech – Interchange – EDI use case. Kraft – CPG – Interchange – EDI use case BNP Paribas - Banking "BNP Sphere" project - Gateway XFB (Swift Fin + Interact + Fileact) Schenker - Logistic - XFB Gateway + XIB + Passport + Sentinel (Success storie available on Intraxway) Total - Oil provider - Energie - Gateway - Exchanges with providers Nestlé - Foods - Gateway Interchange - EDI exchange with their partners (AS2)

Connect any partner, faster Secured and reliable last mile via end-points EDI-INT AS1 EDI-INT AS2 EDI-INT AS3 ebXML ebMS RosettaNet RNIF OFTP HL7 MLLP cXML PeSIT Transfer CFT EBICS Web Services X400 HTTP HTTPS FTP SFTP FTPS SMTP JMS WebSphere MQ WebDAV Plus a SDK Easy Partner Configuration WebTrader: Web-Based Secure Client: FTP(s), HTTP(s), SFTP Activator: AS1, AS2, AS3 Transfer CFT PeSIT Axway Endpoints Large set of connectivity options WebEDI Supplier Portal Connect smaller partners via WebEDI Customers Transport & Logistics Axway B2Bi Financial Institutions Suppliers | © 2009 Axway | All rights reserved.

Portal File Services Pattern Connecting the human web experience and MFT Web portal exposing a business service User access and management (LDAP/AD, SSO, On-boarding) Transparent integration with end user workflow and backend systems More than ease of use (secure and efficient file exchange beyond the portal) Seamless and complete integration (no hops, batching, or queuing) Canadian Institute for Health and Information(CIHI). CA –   – ST - Support Related, integrated with support portal. (single sign on to ST web client) NetApp –   – ST - ?? uploading dump files, distribute to back end =- PROSPECT RIM – CPG – ST - ?? NAMSA - Logistic for NATO - Secure Transport is using as a portal for RFP answers Toyota Europe - Car Manufacturer - XFB Gateway (HTTPS) + Endpoint Workstation - File Portal with small providers

Human to System via Portal Corporate Network DMZ Internet Axway Sentinel World Wide Web Trusted Network DMZ ST Server Enterprise Firewall ST Edge Internet Firewall Application Layer Streaming ST Server ST Edge Internal Users External Users LDAP Single Sign-on Java API Application CRM Case Management Claims Etc. | © 2011 Axway | All rights reserved.

Ad-Hoc File Transfer Pattern Unplanned processes between humans Two models Repository based (persistence for sharing) Recipient based (targeted to individual or group) User access and management LDAP/AD SSO On-boarding Policy based control of file access and transfer   Airbus – manufacturing– ST – Sharing design documents (repository based ad-hoc) IBM – Software – ST – Customer Support Portal for Log files (repository based ad-hoc) Intel – High Tech – ST -  Uses ST in M&A department to share documents between them and company being acquired or divested. Requirement was highly controlled and highly audited. Can you audit and govern H2S/H2H exchange? (managing the humans is a must!) Define security up front and stand your ground

H2H Recipient Mode Transfers Mail Server (e.g. MS Exchange) Send email body with links to attachments Receive email body with links to attachments Axway File Transfer Direct Server Sender (Email/Web client) Recipient OK PURL Upload attachments Automatically download attachments As simple as a mail File Virus Policy ICAP Connector Attachment checked Settings & Alerts System / Community Admin As secure as MFT © 2011 Axway - Confidential and proprietary. All rights reserved.

H2H Repository Mode Transfers Mail Server (e.g. MS Exchange) Receive email notification WebTop WebTop File Transfer Direct Server Recipient Sender Clicks link; authenticates to download file from the share folder Sent file into a shared folder System / Community Admin Community Reports Alerts File Virus Policy ICAP Connector Attachment checked © 2011 Axway - Confidential and proprietary. All rights reserved.

File Transfer Patterns 1. Application Integration 2. Multi-Site Integration 3. B2B 4. Portal File Transfers 5. Ad hoc & email Systems Security / Visibility / Governance Automated Humans Application Integration Replace FTP Extensive Platform Support Non-Intrusive to Applications Integration with scheduling Multi-Site Integration Application Integration + Governance and Configuration management by groups (east coast stores, west coast, etc) Deployment and on boarding efficiency No/low touch at site level B2B Trading Partner Management tailored for a business analyst and to B2B nomenclature B2B content based contextual Routing, Visibility and configuration Extensive Business Protocol Support, Traditional File Transfer Protocol Support and Industry specialization Paves a path to B2Bi consolidation Portal File Transfers Seamless Integration with portal / browser user experience Single sign on and LDAP integration Often the gateway becomes invisible to the user Ad Hoc Ad – Hoc Repository Based Zero footprint client LDAP Integration for group rights / permissions Ad – Hoc Recipient Based Match the users user experience – EMAIL Enforce Policy for transmissions Interactive

MFT Best Practices | © 2009 Axway | All rights reserved.

Managing Your File Transfer Patterns Scope out growth and complexity of data framework Define and prioritize critical ‘exchange relationships’ S2S, B2B, A2A, P2P, B2P, B2C, etc. Quantify and qualify data content relationships Outline support for business types, groups, or departments Update compliance to standards and regulations Account for risk factors Consider both external and internal security event paths Identify the risk types (data loss, intellectual property theft, data privacy breach, compliance violations, etc.) Set realistic coverage objectives What level? How comprehensive or complex? © 2009 Axway - Confidential and proprietary. All rights reserved.

Review Your Current State Internal Network Unix Public Cloud Applications Applications Mainframe New Application External to the Enterprise Files too large to process Other Information Broker Internal File Routing Parse and Transform Files Applications Support Multiple Formats Very difficult to know: - what is connected to what - which files go where or why - how to fix things when they break - how to assess changes Windows Applications | © 2011 Axway | All rights reserved. 22

Consolidate External Data Exchange Internal Network Unix Public Cloud Applications Applications Mainframe External to the Enterprise Gateway Axway Other Information Broker Internal File Routing External Communities AS1/AS2/AS3 S/FTP/S HTTP/S SMTP ebMS RNIF WS OFTP V1/V2 X.420/X.435 Applications Parse and Transform Files Support Multiple Formats Windows Applications | © 2011 Axway | All rights reserved. 23

End Point Provisioning External to the Enterprise Internal Network Unix Applications Applications Mainframe Peer to Peer File Transfer Internal MFT Axway Other Gateway External to the Enterprise Applications Windows Applications | © 2011 Axway | All rights reserved. 24

External to the Enterprise MFT + Visibility Internal Network Unix Applications Public Cloud Mainframe New Application External to the Enterprise Axway Visibility Events Applications Intelligent Hub Axway Any to Any Identify Parse Transform Map Other Applications Meta Data Content Tracking Windows Applications | © 2011 Axway | All rights reserved. 25

External to Enterprise Complete MFT Objective: connect to all partners inside and outside of the enterprise Axway Visibility Centralized Community Mgt External to Enterprise Communication Internal to Enterprise Routing Encryption Exchange Internal to Enterprise Any to Any signaling transmissions messages External Communities Transform Map AS1/AS2/AS3 S/FTP/S HTTP/S SMTP ebMS RNIF WS OFTP V1/V2 X.420/X.435 Internal Systems FTP JMS JDBC MQ FS ALE HTTP Email Custom Meta Data Content Tracking

Questions/Discussion For more information visit: www.axway.com