SFTP Module

SFTP module introduces secure, interactive and automated data exchange that allows files to be transferred between hosts in a similar way to SCP protocol. It encrypts both commands and data, which means that sensitive data and user passwords can't be intercepted by third parties. 

This module can be enabled on request sent to Quatrix Customer Care. Every added SFTP user has a unique login that is used to log in to SFTP client. 

Assigning SFTP login ID to a user

If you would like to grant access to SFTP for your users, you need to enable SFTP at user creation.

Your user will get an email notification as soon as SFTP is enabled for his/her login.

Now your users can access your Quatrix site using any SFTP client software. They must log in with their ID instead of their email address and use their existing account password.

Locking SFTP login to Shared With Me folder

To limit your users via SFTP to a specific folder, put the checkmark near the Lock SFTP home field.

Once a user logs in via SFTP they’ll see only folders shared with them within Projects Shared With Me folder (check the example with FileZilla below).

You can find more information on Project Folders here.


Payment for SFTP Module 

If you would like to use SFTP or grant access to SFTP for your users, you need to purchase the Enterprise Security Module.

You can go ahead with the mentioned module by sending the request to Quatrix Customer Care or calling one of the numbers below:

As soon as the module is activated, the number of available SFTP user licenses will be displayed on the Account details sub-tab.

SFTP Licence Management  

You can find your SFTP credentials by clicking on your Name near the gear sign.

Every added user has unique SFTP credentials that are stored after his deletion. If you restore SFTP access for this user, credentials will be the same. 


Antivirus

We are responsible for the security of your data that you store or send with Quatrix.

Once the Antivirus is enabled all uploads are scanned for malware on the server side and email alerts are sent to all Admins. 

The Admin can log in and delete the infected files.

To Add or Remove virus protection for all users of your Quatrix account do the following:

  1. Click Administration
  2. Go to the Service Settings tab
  3. Tick the box to Enable Antivirus under the Security field

 

Once the virus protection is enabled, it would be displayed on the Account Details sub-tab of the Administration tab as Active.


The example of email alert:

 

 

Worth mentioning that Antivirus is free forever!

Intrusion detection and prevention

Multiple incorrect login attempts may trigger a lockout

Enter the captcha code to unlock.

Password must meet complexity requirements. Complexity requirements are enforced when passwords are changed or created.

Passwords length should be equal or more than 8 characters, include symbols, numbers, lowercase and uppercase characters. 


Two-factor authentication

You can add an extra layer of security to your Quatrix account by turning on two-factor authentication (2FA). This requires you to have access to your phone when you log in. This means even if your password is compromised or stolen, only you can log in to your account.

 

The Administrator can turn off 2FA for all users on the Administration tab.

2FA enforcement

Admin can make 2FA mandatory for all users on the account level. To force 2FA:

  1. Go to the Administration tab.
  2. On the Service Settings sub-tab put the checkmark next to the Force 2fa field.
  3. Click Save.

2FA should be set up on the first attempt to login after successful password validation.

Resetting and disabling 2FA

 

The Administrator can turn off 2FA for all users on the Administration tab.

If you lost your 2FA enabled device, you can ask your administrator to reset or disable 2FA for your account.

 

You can switch accounts on unsuccessful 2FA code entry if there are more than one

 

You can find more information on setting up 2FA here.