This topic provides information about specific features you can use to configure advanced settings for user and templates in ActiveTransfer:

You can define the following restrictions for a user:

These settings will override any restrictions set in the template associated with the user, role, or group.

You can set authentication and login restrictions that specify the maximum number of users who can log in simultaneously, the maximum login and idle times per session, public key and password requirements, and the paths to trusted public SSH key files.

You can restrict particular actions for files that match a specified pattern. For example, you can restrict users from uploading files that end with .exe. You can also restrict access to subfolders in the file system that match a specified pattern.

You can restrict connections to ActiveTransfer Server or an ActiveTransfer Gateway instance by choosing the protocols or client IP addresses for access. You can also specify the default character encoding for the connection between the user and ActiveTransfer Server.

You can specify the days of the week and the time during which users can connect to ActiveTransfer Server.

You can define specific file-based encryption and decryption PGP keys for users. These settings will override any encryption assignments set in the template associated with the user, role, or group.

When encrypted, files are stored on the user’s drive. Encrypted files are decrypted only if they are transferred back through ActiveTransfer using the same key that was used to encrypt them. When encryption and decryption keys are configured at multiple levels (user, server, and folder), ActiveTransfer enforces the following order of preference:

For example, if user A accesses port 10 and uploads a file in a VFS MN, then ActiveTransfer checks if the encryption or decryption key is available for user A. If no key is available at the user level, then ActiveTransfer checks for the folder settings for a key. If no key is present at the VFS level, then ActiveTransfer checks the server level settings for the key.

You can define specific file-based encryption and decryption PGP keys for users assigned to a template. When files are encrypted, they are stored on a user’s drive in a format that cannot be read outside of ActiveTransfer. Encrypted files are decrypted only if they are transferred back through ActiveTransfer using the same key that was used to encrypt them.

You can override the template-level encryption and decryption options for a specific user.