SMFT Made Easy - PROSTEP INC.webinarsbyprostep.com/wp-content/uploads/2017/02/Slides...Secure Managed File Transfer (MFT) Made Easy Tips to help you close data leaks and find a data

PROSTEP Inc • 300 Park st. • Birmingham MI 48009 • www.prostep.com

Webinar

May 12th 2016No part of this presentation may be reproduced or transmitted in any form for any purpose without the express written permission of PROSTEP, Inc. The information contained in this presentation may be subject to change without prior notice. The statements made in this presentation do not represent any kind of offer or warranty. Portions of this presentation are pre-recorded.

© 2016 PROSTEP, Inc.

PROSTEP, Inc. 300 Park Street Suite 410, Birmingham, MI 48009US Toll Free : 8-PROSTEP-01 Direct: +1-248-247-1007 [email protected] / www.prostep.com

Secure Managed File Transfer (MFT) Made Easy Tips to help you close data leaks and find a data exchange solution tailored to your requirements -

Page 2

Practice Question

Welcome

Brian SchoutenSales Executive – PROSTEP, [email protected]+1-248-247-1007

Since its foundation in 1993, PROSTEP has become a leading provider of turn-key solutions for engineering processes in the areas of product data integration, data migration and supply chain communication for manufacturers and suppliers.

We provide leading manufacturing companies worldwide with the support they require for designing, implementing and optimizing their internal and cross-enterprise development processes.

© PROSTEP INC � 2014

Stefan PreussSenior Consultant – PROSTEP, [email protected]+1-248-247-1333

Page 3

Webinar Overview

�This Webinar Will Cover the Following Topics:� Finding the leaks in your current data exchange � Define specific data exchange requirements based on

your organization and industry� Integrating secure data exchange protocols and

processes into your business

�This Webinar also Includes:� PROSTEP secure data exchange products� Insights to data exchange processes and requirements� Data exchange best practices� Question & Answer� Audience surveys


Page 4

About PROSTEP

Shareholders

Over 23 years experiencewith engineering interoperability, migration, intelligent documents, benchmarking, more

Approximately 250 employees and consultantsbased from international locations throughout Europe and in North America

More than 500 Customersthat are leading companies across most industries

A vendor neutral / independent engineering services and software company since 1993

[email protected] / 8-PROSTEP01

Reseller

Page 5

PROSTEP Technology Partners

© PROSTEP AG � 2014

Page 6

Agenda

© PROSTEP AG - 2014

The Pitfalls of Modern Methods for Data Exchange

Solution Concepts for Secure Data Exchange

OpenDXM GlobalX Product Overview

Process Examples and Customer Stories

Page 7

Everyday New Challenges in IP Protection

� Your corporations intellectual property is what makes your products competitive and compelling

� Many industries are subject to IP safeguard standards that can result in huge fines and imprisonment

� A single violation could ruin your reputation with existing and prospective customers

� New technologies making information sharing easier are creating opportunities for violations

Page 8

How do people exchange data today?- Typically the path of least resistance


Page 9

Failures with the path of least resistance

Page 10

• Simple Mail Transfer Protocol (SMTP) is an Internet standard for electronic mail (e-mail) transmission across

Internet Protocol (IP) networks. SMTP was first defined by RFC 821 in 1982 and grew out of standards developed

during the 1970s.

• File Transfer Protocol (FTP) is a standard network protocol used to transfer files from one host to another host over a

TCP-based network, such as the Internet. FTP is built on a client-server architecture and uses separate control and

data connections between the client and the server typically with clear text authentication and published as

RFC 114 in 1971

Paraphrased from <http://en.wikipedia.org/wiki/FTP>

Email & FTP – Really ?How old are your trusted protocols?

Page 11

Cloud Services? Dropbox? Can you trust your data to reside outside your network?


� Do the providers obtain rights to the data?

� Do they have effective security policies and governance in place?

� Is the transmission and exchange of data secure?

� How do you log and audit the data exchange?

� Are you in control of recipient accounts?

Page 12

CONVENIENCE!

Why do we keep doing it?

“increasing convenience almost

always reduces security”

Page 13

Agenda






Page 14

Data Exchange / Collaboration Challenges

� Getting the Right Information� Correct Version / Iteration� Appropriate IP exposure� Correct Configuration

� To the Right Person� Controlled Access� Audit Reports

� At the Right Time� Minimal Lag Time� In the Field Updates

� In the Right Format� Purpose Driven

� Globally Accessible� Via Internet, OFTP, or other standards based protocols

Page 15

Standalone “Simple” Portal Solutions

Supplier / ConsumerOEM / Sponsor

Standalone Portal Solutions

� Quick / Easy to Deploy� Simple Administration

� Affordable (sometimes free)� Good Basic Security (outside of email)� Often Hosted outside of company *

Not Integrated (Swivel Chair) Solution –Less Convenience (must be logged in and online) –

Can be hard to customize –*Monthly Fees for users / volume add up quickly –

Standalone Portal Solutions

� Quick / Easy to Deploy� Simple Administration

� Affordable (sometimes free)� Good Basic Security (outside of email)� Often Hosted outside of company *

Not Integrated (Swivel Chair) Solution –Less Convenience (must be logged in and online) –

Can be hard to customize –*Monthly Fees for users / volume add up quickly –

Page 16

“Advanced” Portal Concepts

� Automated Processes� Upload and download with Agent,

installed at the user's desktop

Agent

Location 2

Database FileVault

Server

CADConverter

GatewayKeyStore

Server Location

� Main OEM Server Location- Authentication

- Encrypted data storage - PKI-Management

- User right definitions- Processing control

- Logging- E-Mail notification

- Data routing- Data conversion, …

Gateway

Location 3

� Batch Mode� Data are temporary stored quickly

in local network drive � Transfer of data to run completely

in a batch mode Gateway

FileVault

CADConverter

Location 4� Advanced Functionality� Encryption

� Local File Vaults� Local conversion of data

WAN /Internet

� Manual Processes� User sign on over WEB-Browser and up- or

download data manually, interactively

Location 1

WAN /Internet

Robot

Partner

Internet

� System to System � Automated / Integrated

� Remote Data Vaults � Supplier signs in over WEB-Browser � Data is uploaded from a data vault

close to the end user

Supplier

Internet

Page 17

CommonSecurePortal

Solution

Web

-Bro

wse

r G

UI

Windows DesktopPlug-In (“Send To”)

Windows ExplorerIntegration

AGENT

ROBOTs

ROBOT(batch mode)

OFTP/ENGDATOFTP1/2

(batch mode)

Requirements : Access from anywhere / any system

Page 18

Extended Requirements : Securing documents after transmission with DRM

� DRM Protected Documents� Limit Access to named users� Revoke Rights in the field� Force Updates to Latest

Document Versions� Authentic via PKI, AD, LDAP,

RSA, Others� Limit Document Features

� Read Only� Save� Print� Copy� Measure� Cross Sections� Etc

� Traceability Logs by Document

Page 19

Requirements : Send only the engineering data that fulfils the intended purpose

� You don’t have to give away the corporate jewels� Systematic and Automatic processes can transform you data prior

to data exchange to allow only the minimal information required for the recipient to do their job.

� Data can be “dumbed down” with history, features and other IP related elements removed.

� Each recipient can have a “data profile” that determines what they can receive

� Neutral formats can be created, on the fly� NX� JT� STEP� 3DPDF� Etc

Page 20

Agenda






Page 21© PROSTEP AG • 2011

OpenDXM GlobalX ® on a page

� OpenDXM GlobalX® is the Managed-File-Transfer(MFT) solution for secure data exchange for all types of documents for all divisions

� The transfer of encrypted files over a secure internet connectionbetween business-to-business (B2B) partners is managed byOpenDXM GlobalX® to provide a high level of security as well asan intuitive user interface with control, auditability, and visibility

� The integrated process engine and the gateway technology ofOpenDXM GlobalX® facilitate a full automated file processingfrom application-to-application (A2A) and server-to-serveracross company boundaries

Page 22

Major Features of OpenDXM ® GlobalX

© PROSTEP AG • 2013

SecurityScaleable and

flexible

SecurityScaleable and

flexible

Communi-cation

Integrated notifications

Communi-cation

Integrated notifications

IntegrationInterfaces tointegrate with

backend systems

IntegrationInterfaces tointegrate with

backend systems

Data transfer

Huge volumes, far distances

Data transfer

Huge volumes, far distances

FlexibilityDifferent clientsfor various use

cases

FlexibilityDifferent clientsfor various use

cases

ScalabilityFlexible

Deployment andlicense model

ScalabilityFlexible

Deployment andlicense model

ProcessingIntegrated

solution for dataprocessing

ProcessingIntegrated

solution for dataprocessing

TraceabilityExchange

processes andcritical changes

TraceabilityExchange

processes andcritical changes

ReportingKPIs andscheduled

reports

ReportingKPIs andscheduled

reports

AutomationBatch access

with robots andgateways

AutomationBatch access

with robots andgateways

Page 23

Reliable & fast data transmission

� The Transfer Manager of OpenDXM GlobalX takes care of fast and robust transmission of data over long Internet distances and big size data packages

� The Transfer Manager shows the progress of transmission and provide the user to stop, start, restart and prioritize the queued data transfer jobs

� A calibration function is included to create profiles for best performance (block size and parallel threads

� Integrated Function to compress data packages (ZIP or internal format)


Page 24© PROSTEP AG • 2012

� GlobalX supports highest level of end-to-end encryption� Hybrid Encryption

� Data encryption using symmetric algorithm AES (128 – 256 Bit)� Key encryption using asymmetric algorithm RSA (4096 Bit)� Integrated Public-Key-Infrastructure (PKI)� Capability to import public keys

Encryption

Sender Recipient

Public Key of Recipient

File (unencrypted)

Data Key(symmetric)

1

2

3

Private Key of Recipient

Data Key(symmetric)

4

5

File (unencrypted)

Page 25

Reporting and KPIs


� Integrated Reporting mechanism� KPIs with flexible filter options� Individual Filters for research & statistic reports can be

defined and saved per user� Results of research can be exported as CSV format to

Microsoft EXCEL

Page 26

OpenDXM GlobalX Clients


Sta

ndar

d C

lient

sO

ptio

nal

Clie

nts

User Administration

Basic Web Client

Standard Web Client

Admin Web Client Custom Eclipse Client

Personal Agent Microsoft OutlookPDM Clients

Customizing

iPhone/iPad App

Page 27

Standard modules to extend functionality

Page 28

Agenda






Page 29

OpenDXM GlobalX at NORDAMFully automated data exchange with 3D PDFs


Motivation� High security� „Easy to use‘ solution� Integration� Automation� Global use� Meets ITAR standards� Auditable reports

Smarteam

Browser

Decision criteria forOpenDXM GlobalX:� Data is encrypted at rest� All information and

transactions are recorded� Individual focus accounts

Page 30

OpenDXM GlobalX at PorscheMatrixOne Integration, Portal- & OFTP Data Communication


Motivation� High and scalable security� ‚Easy to use‘ solution� Integration� Automation� All data formats� Global use� Automotive standards

MatrixOne

OFTP

Browser

Decision criteria forOpenDXM GlobalX:� Best security options� Highest flexibility of all

software solutions� Standards for data processing

Page 31

OpenDXM GlobalX at MEYER WerftFully automated Data Exchange with Delta Evaluation and Synchronisation


Motivation� ‚Easy to use‘ solution� High and scalable security� Integration into existing system environments� Possibility of automation with development partners� Interface for system integrations

CAD

DataGlobalX

Robot

CAD

Data

GlobalX

Robot

Page 32

Final Advice From the Field

� Start Today� Use Free Trials to get a feeling for what does and does not

work for your enterprise� Look for a mix of Hosted or Self Installed Options� Look for technology that integrates not only front end

applications (Outlook, Desktop, Mobile) but back end applications like PLM, ERP, Etc

� Low Hanging Fruit to go after for DX Security � Outlook� Desktop� Web Based

� Don’t forget about protecting your data once it leaves your enterprise. Getting it there is only part of the equation.� Strip unneeded IP� Consider DRM solutions for when your data is in the wild.

Page 33

Our Customers

Automotive OEMs Aerospace Industry

Automotive Suppliers Shipbuilding

Engineering, Plant Construction

Electrical/Electronics Other Sectors

PROSTEP Inc • 300 Park st. • Birmingham MI 48009 • www.prostep.com

No part of this presentation may be reproduced or transmitted in any form for any purpose without the express written permission of PROSTEP, Inc. The information contained in this presentation may be subject to change without prior notice. The statements made in this presentation do not represent any kind of offer or warranty. Portions of this presentation are pre-recorded.

© 2016 PROSTEP, Inc.

PROSTEP Inc.300 Park Street Suite 410Birmingham, MI 48009US Toll Free : 8-PROSTEP-01 (877-678-3701)

Toll Free Fax: 8-PROSTEP-02 (877-678-3702)

International Direct Dial: [email protected] / www.prostep.com

PROSTEP WEBINARS

Thanks for Attending!
