Solarwinds Serv-U Gateway
Serv-U Gateway is a secure addition to Serv-U MFT Server and Serv-U FTP Server

Overview:

Serv-U Gateway is a secure addition to Serv-U MFT Server and Serv-U FTP Server. It allows you to safely accept incoming connections in the DMZ, and provides deeper protection for file transfers on secure networks. Gateway plays a similar role to that of a reverse proxy server. It safely handles traffic that should not be directly passed from the Internet to secure internal systems. A two-tier deployment involving Serv-U and Serv-U Gateway satisfies most “managed file transfer” requirements.

Serv-U Gateway At A Glance

• Safely accepts all incoming connections on a hardened server (whether using FTP, FTPS, SFTP, HTTP or HTTPS) located in the DMZ segment.
• Avoids all inbound connections from the DMZ to the secure private network.
• Ensures that no data is stored in the DMZ segment.
• Supports FIPS 140-2 validated cryptography.
• Supports configuration and file transfer over IPv4 and IPv6 networks.

Advantage

• Security: No data is ever stored in the DMZ. All incoming connections to the internal network are safely accepted without exposing sensitive systems.
• Compliance: Helps meet PCI DSS and other high-security compliance standards.
• High Availability: Supports active-active N+1 horizontal scaling of Serv-U MFT Server.
• Load Balancing: Helps distribute incoming connections to different Serv-U MFT Server instances with the help of network load balancers.
• Configuration: Helps simplify configurations for complex Serv-U deployments.

How Gateway Works

• Serv-U MFT Server or Serv-U FTP Server connects to Serv-U Gateway and tells it to listen to client connections on specific IP addresses and ports. This connection is called the “Gateway Connection Channel.”
• When an FTP client connects to Serv-U Gateway, it informs Serv-U about a new connection.
• Serv-U, sitting on the internal network, checks the client’s IP address and performs authentication as required.
• Once the client is approved, Serv-U opens a new connection to Serv-U Gateway called “Gateway Data Channel.”
• Gateway stitches the incoming client connection to the new Gateway Data Channel created specifically for this connection, and facilitates safe data transfers between the FTP client and Serv-U file transfer server.

Integration with other Solarwinds products

Serv-U Gateway can be used with Serv-U Managed File Transfer (MFT) Server and Serv-U FTP Server. Gateway provides defense-in-depth security to Serv-U deployments. This type of architecture is essential to meet PCI DSS, managed file transfer, and other high-security requirements.