SOFiE - Safe Online File Exchange

It is our pleasure to present you our SAFE SOLUTION with an above-standard security level – SOFiE – an application to exchange files of any size and type. We offer you a reliable solution with high security for receiving and sending files both inside a company and outside for communicating with other entities. SOFiE will significantly increase the protection to a level very difficult to achieve when using other file exchange solutions, like e-mail or FTP server for example. Simply put, SOFiE is the most secure way to exchange confidential information online.

Example of the SOFiE application usage inside a company

The application supports GDPR

SOFiE stores audit logs of all activities, including user log in, log out, file upload, file download and others.

Compliant with NÚKIB recommendations

SOFiE includes security technologies and processes that help fulfill the recommendations for administrators.

Release Notes

Integration of SOFiE and Sandbox

SOFiE and Fortisandbox SOFiE and Sandblast

Integration of Sofie and 2element (MFA)

More about product

Main features

Integrated file protection using anti-virus engines and Sandboxes, which detect Zero-Day threats.

Clientless solution - users need only a web browser (no plugins or other software required for clients).

Adjustable file lifetime (automatic removal of files based on a user's or administrator's setting).

Files can expire on a chosen day set by the user or administrator.

The application includes an API for integration into third-party applications.

Option to set granular access rights.

Problems with e-mail attachments

Attachment size problem:

Most e-mail servers limit the size of attachments to less than a 50 MB (often even 5 MB or 10 MB). E-mail communication is therefore not suitable for exchange of large documents, which often exceed these size limits for attachments.

Attachment blocking problem:

The security nowadays often requires using highly restrictive policies for attachments allowed in e-mails. Such policies for example block executable files, documents containing macros and even archives containing such files.

The SOFiE application enables you to safely send and receive files, which are problematic in e-mail communication. Files can be analyzed by a SandBox (protection from zero-day threats).

SOFiE

Safe Online File Exchange

Anonymous
users

Logs and alerts

Active directory Single Sign-On

Antivirus

Internal users with login

Reporting and auditing

2FA authentication (TOTP)

Sandbox

Defined administrator roles

Backup and external storage

SSL / TLS certificates

API (DLP, Antivirus, Sandbox)

The SOFiE application allows you to securely receive and send files that are problematic in e-mail communication. Files are analyzed by SandBox (protection against zero-day attacks)

Security

Support for encrypting folders on the server „encryption at rest".
Transferred data are encrypted using SSL / TLS by default.
Option to enable two-factor authentication (2FA - TOTP).
Single sign-on integration (SSO) with SAML providers.
Spam protection (CAPTCHA).
Block logins from specific IP ranges.
Logging of all system activities.
Option to export logs to remote syslog for external processing (SIEM support).
Antivirus scanning of all files by default.
Optional integration of more antivirus engines.
Optional inspection of files by a sandboxing engine (zero-day malware).
Application passed penetration testing including OWASP Top 10.

Penetration tests

Security of the application is tested and verified by penetration testing by NETHEMBA corporation.

Platform and deployment

Application SOFiE can be deployed:
1. locally in the customer's environment (ON-PREMISE)
  - Virtualization options: VMWare, KVM, Xen, Hyper-V.
  - Option to install on the customer's physical server (RHEL, CentOS, Rocky Linux)
2. in the cloud environment
Application can be deployed in a form of a virtual appliance with operating system and all necessary software components already built in.
Possibility to run the application on a public cloud: AWS, Azure, DigitalOcean and others.