JYes, a static IP is required to ensure the consistency of external file downloads. If the Qiata File Transfer Appliance is not intended for sharing with external users, it can be used without static IP.

The instructions can be found on the USB stick that comes with your appliance and in the download area.

Each transfer is made via HTTP using SSL or HTTPS. External users can only access the service through a unique link sent to them. They do not access the service directly. Internal users can be assigned to specific IP areas to prevent access from the Internet. The files on the system are "hashed" to make direct identification impossible. Transfers can also be provided with an individual password for the access of individual users. 

The appliance is a hardware that has been specially designed for the particular application. It is not necessary to administer the entire operating system like with a PC or a server. The administrator only has to manage the appliance specific functions. It is used without a monitor and is usually administered with a serial console or via the network using a browser. If the system should fail or need to be reset, there is no need to reboot the entire operating system or application. The administrator just has to follow the reset instructions and the appliance will be returned to its factory state.

SDR (Secure Disaster Recovery), SECUDOS 'unique USB stick recovery technology, reduces the number of appliance returns by half due to an apparent defect, enables software upgrades and downgrades, automatically generates a hardware test log file and detects SECUDOS hardware automatically.

An SDR allows the Qiata FTA to be reset to factory settings.

The basic functionality of the FTA requires the following ports:

• Qiata FTA WebUI: Port 443 TCP -> external

For the administration of the FTA the following is needed:

• DOMOS WebUI: Port 10000 TCP -> internal

Optional Ports:

• SSH: Port 22 TCP -> internal
• Smart Delivery: 9000 UDP -> internal/external
• MailClient Integration: 25 TCP -> internal

FTA

The FTA license is the .xml file which is responsible for the applicability of the software. In addition to this, the expiration dates and features of the software are controlled here - if this license expires, the message "This installation is not yet licensed" appears on the interface. The license must be imported in the ftadmin area (black interface) and can be reached via the user "ftadmin".

DOMOS

The DOMOS license is the .lic file. This license is used to receive updates from our repository. If this license has expired or is not intended for the device, it is not possible to receive updates. Thus, the software always remains on the same level. This license should be installed in the DOMOS interface and can be reached at the address https://FQDN:10000.

With full backup there are two ways to create them (Add Backup Job):

1)No backup directory selected

If the "Backup Directory" field is left empty when creating the job, a full backup will be created each time the job is executed. That means, if you have configured a backup every day, DOMOS will create a folder for each day (ex: 10.04.2015_backup, 11.04.2015_backup). Each of these backups can be used as a restore.

2) A backup directory is configured

If an extra backup directory has been defined (eg: A folder "Backup" has been created) there is always only one backup. Each newly created backup only adds the files that are really new. In our example, this would be a folder "Backup" in which only the latest version is saved every day. This backup can also be used for restoring, but always contains only the latest version.

Shut down the VM and adjust the size of the hard drive with the tool for your VM.

Then restart the VM and log in via SSH. Use "su-" to log in as root and execute the following program:

/opt/secudos/DomosConf/bin/DomosVMDiskResizer

The system reboots and then uses the extended hard disk space of the FTA.

There are basically two types of license serial numbers.

Hardware serial number
The Hardware Serial Number is a number created by our system that starts by default with LR and can be found on the bottom of your appliance. The hardware serial number is required for an RMA and should be kept ready for a support call.

Software serial number (Qiata license number)
The software serial number is provided with your Qiata license and can be viewed in your Qiata FTA-UI. To view your serial number please log into your Qiata FTA-UI as "ftadmin". In the following table you will find under the item ID your software / license number

FTA to V-FTA

Log into https://my.qiata.com:10000 with the user "admin" on your DOMOS interface. Go to the menu item "Backup / Restore" -> "Config Backup" and start a configuration backup. Save the offered configuration.dat on a suitable storage medium.

For a data backup, please consult the FTA manual under point 2.11 (Data Backup / Target). After a successful backup start the new system and insert the configuration.dat. Then the data backup.

Please contact our Sales TEAM to get a new license.

V-FTA to FTA

Log into https://my.qiata.com:10000 with the user "admin" on your DOMOS interface. Go to the menu item "Backup / Restore" -> "Config Backup" and start a configuration backup. Save the offered configuration.dat on your SDR stick.

For a data backup, please consult the FTA manual under point 2.11 (Data Backup / Target). Now install the new system via SDR Stick. Then you start the data backup.

Please contact our Sales TEAM to get a new license.

From the Qiata version 1.50 upwards, new templates for the Qiata File Transfer solution are available. In addition to the visual revisions, the update contains additional improvements in the workflow.

What's new?

• The color concept of the Qiata has changed from orange to blue and white.
• The look of all templates (Mail & Pages) has been modernized.
• The Pages (download page, upload page, login, etc.) now use current technologies such as Bootstrap and JQuery.
• The e-mail templates have been optimized and redesigned for all popular mail clients (desktop and mobile).
• From version 1.50 there are three central CSS files, which take care of the login area, the general styling and corresponding media queries (mobile adjustments). This allows color changes to be centrally controlled.
• All templates (Mail & Pages) are 100% responsive, which means they're usable on all devices without restriction.

How can I use the templates?

All Qiata systems installed before version 1.50 will not receive the new templates automatically. In order not to overwrite any changes in your current templates, a manual reset procedure of the templates is necessary. As a company administrator, navigate to the area "Company" -> "Templates". In the lower area you will find the button "Reset all templates". Upon execution, the new templates are loaded and automatically installed.

ATTENTION: : All changes from the current templates will be discarded. This action can not be undone.

rpm -e ntp

echo "Win.Exploit.CVE_2019_0903-6966169-0" >> /var/clamav/sig_whitelist.ign2

rm /var/clamav/sig_whitelist.ign2 

When updating to Qiata version 3.0, templates must be reset to guarantee technical operation. The following files and templates are affected:

Pages

• Upload Page (upload_plain.html)
• Reset Password Page (reset_password.html)
• Pincode-Seite (pincode.html)
• Newsletter Download Page (download_newsletter.html)
• Login Page (login.html)
• UI-Header(header.html)
• Forgot Password Page (forgot_password.html)
• UI-Footer (footer.html)
• Errorpage (error_page.html)
• Transfer Download Page (download_plain.html)
• Automatic Sign-Up Page (auto_signup.html)

CSS Files

• Main Styling (style.css)
• Login Styling (login.css)

Starting with the Qiata 3.0 release, we will gradually disable support for the current login method in the XML API. For upcoming applications that use the XML API, only the new standard (OAuth 2 with Open ID Connect 1) should be used. If you have any questions regarding the changes, please feel free to contact us directly at: This email address is being protected from spambots. You need JavaScript enabled to view it.

With version 3.0, accessibility from the internal system to the external FQDN is inevitably required. The Qiata must be able to access the OpenID service via its own FQDN (e.g. https://demo.secudos.com/.well-known/openid-configuration). If necessary, please adjust the host entries in DOMOS, or guarantee accessibility via the firewall.

Here is an example: Your system is running internally with the IP address: 192.168.1.1, the External IP is: 63.62.61.60, the FQDN is: files.domain.com. The system must now be able to resolve the FQDN files.domain.com from Internal. You can test this, for example, by starting a ping (Network -> Ping) to files.domain.com on the console or in DOMOS. If the FQDN is not resolvable, please create a new host entry in DOMOS.

• To do this, first log in to the DOMOS WebUI
• Navigate to the "Network" -> "Hosts" item
• Click on "Add a new host address"
• Then enter the IP address and the FQDN
In our example, we enter here: 192.168.1.1 as the IP address and files.domain.com as the FQDN.
• Then click on "Activate Settings" to apply the configuration