Secure File Sharing

Secure File Sharing Remote Access to Windows Shares

Secure File Sharing

MyWorkDrive allows secure file sharing without the risks of cloud storage or migrating files to unproven sync and share systems.   In just minutes, you can activate a web client portal for secure file sharing, branded with your company logo, color scheme, and URL.   Access to files are based on Active Directory security and NTFS permissions out of the box.   Should you wish, additional security features can be easily activated including;  Data Loss Prevention and Two Factor Authentication.

Our MyWorkDrive secure file sharing server is the only software that exclusively uses security based on NTFS permissions.   There are no overriding logins, databases, service accounts or services that can be leveraged to gain unauthorized access.   When a user logs into MyWorkDrive they gain access to only files and folders as defined in NTFS.  Even if an administrator of MyWorkDrive were to attempt to provide access to shares using MyWorkDrive, no additional access could be granted since authentication runs under the users security context when they log into the system.   MyWorkDrive integrates with Microsoft Server Access Based Enumeration to provide visibility to files and folders based on NTFS permissions.   NTFS security is the tried and true backbone of companies secure file sharing networks since it was released in over 20 years ago.

Consider the risks of competing data base driven sync and share companies that use their own security mechanisms.  It was recently revealed that a leading secure file sharing firm utilized an alternative access mechanism that exposed customers sensitive data between accounts… this from a company that bills itself as a security-minded firm, stewards of sensitive and confidential information.

MyWorkDrive converts Windows based SMB/CIFS file shares into a secure file share that can be accessed anywhere over https/SSL using highly encrypted RSA 4096 and TLS 1.2 FIPS compliant protocols.    By default Windows file shares are accessed internally on a local area network by mapping drives using Windows file explorer clients.   While this is great for local area network access, however when remote access is needed the additional burden of managing, installing and supporting a VPN to secure File Shares has been the only option for enterprise businesses since accessing files over SMB port 445 is typically blocked on most firewalls and considered insecure.  The SMB protocol is not designed for internet communications slowing down remote access further.

With the MyWorkDrive add-on for Windows File Share servers, SMB based Windows File Shares are converted into a secure file share that can be accessed over https.  https is the secure port used to protect data communications and is supported in modern web browsers.  In fact, one of the primary ways companies used MyWorkDrive is to manage and access files using our Web File Manager.  Secure File Shares are easily accessed by users with minimal training and support.  Users can edit, upload, create and share files all within a browser.  This reduces the support burden on internal IT and improves security since files are only accessed one file at a time.  All user access is logged and searchable for compliance and auditing.  To further secure file shares, IT Administrators can enable two factor security and data loss prevention features built into MyWorkDrive.  With the addition of these security options IT can feel confident that internal file shares are secured in any environment with the highest levels of encryption and security to meet or exceed compliance standards including HIPAA, GDPR, FINRA and FIPS.

In addition to browser-based file access, MyWorkDrive offers our desktop mapped drive clients.  Both clients provide a mapped drive type experience to secure file shares over https.   Users can simply access secure file shares using the mapped drive in real time.  Traditional access to internal users is also supported side-by-side with MyWorkDrive clients with support for file locking.   Unlike traditional file shares, MyWorkDrive permits blocking of file extensions in our Mapped Drive Secure File Sharing client to further enhance and lock down security.   Any changes made to files are saved back directly to the internal file servers eliminating files scattered over insecure local pc’s or mobile devices reducing the need for mobile device management software.

 

More than just secure file share remote access…

 

Enjoy the ease and convenience of cloud file access with proven best-in-class security and the advanced file sharing features that you need to run your business without VPN, syncing or storing data in a public cloud.  Securely share files and stay in compliance with MyWorkDrive enterprise features including:

  • Integrated tools for secure file sharing made easy with OneDrive
  • Online document access built-in, so you can edit documents in Office 365 without migrating them or storing them in the cloud.
  • Mobile apps for secure file sharing on-the-go
  • Support for Windows Server file encryption of documents in transit and at rest
  • Extensive logging lets you know who accessed or modified files – All user access is logged and searchable to meet your compliance requirements
  • Granular user permissions based on Windows Security let you control access to every folder
  • Data Loss Prevention options to eliminate file downloads and external sharing

More Info..

 

Quantifying Technology Costs of VPN Software

VPN Software Costs

Businesses of all types utilize VPN software solutions to provide remote access to their employees.  How do we quantify the true Total Cost of Ownership (TCO) of supporting VPN software?  Why is TCO Important?

Gartner, Inc. (www.gartner.com) defines TCO as the total cost of using and maintaining an IT investment over time.  TCO calculations include a combination of direct costs (hardware, software acquisition, management and support) and indirect costs (end-user training and downtime).   TCO is often overlooked and unbudgeted, presenting an incomplete projection of overall IT costs.

Most organizations look at their direct costs and setup labor only at the time of purchase.  However, research shows that a system’s software & hardware costs typically represents less than 20% of its TCO, with ongoing technical support, maintenance and labor costs accounting for the remaining 80%.  These ongoing VPN Software support costs represent the largest piece of the TCO pie and should therefore warrant the highest levels of scrutiny.

Consider the following chart that demonstrates the potential annual costs of supporting VPN clients for 1000 Users:

VPN Software Costs

Hardware/Software and Labor Support Direct Costs:

  • Hardware & VPN Software Costs: A business of 1000 employees can expect to pay between $6000-$8000 for a dedicated VPN device with a hot spare + Annual Maintenance.
  • VPN Software Setup Costs: For large enterprises VPN services can take up to 40 Hours for procurement, basic setup and deployment.
  • Ongoing Maintenance: VPN Devices require continual updating and refinement – expect ongoing maintenance, after hours updating and security patching.
  • User Support: Plan on providing technical support time to setup VPN Software on end user devices at a minimum of 30-60 Minutes per device with basic training for initial setup and an average of 15 Minutes/User per month for ongoing support.
  • Two Factor: Add costs for supporting various two factor solutions – Some solutions allow use of third party services (at an additional cost), requiring additional configuration while others such as Microsoft VPN can utilize machine certificates which require additional support hours to manage and setup.

Potential Indirect Costs:

  • Internal Systems open to potential compromise – By default, an end user’s Windows network is routed through the office VPN network. As a result, this leaves the internal network open to Malware such as Crypto Locker and exposes the network up cyber security threats.
  • IPsec type VPN’s are blocked at many locations resulting in calls to the help desk to resolve connectivity issues and results in lost employee productivity.
  • Minor network fluctuations can disconnect the VPN clients potentially corrupting open files resulting in support costs for restores and lost work.
  • The IT Department will need to maintain an additional fleet of corporate laptops with VPN pre-configured for each potential remote user.

Browser Based VPN Alternatives

Techtarget.com encourages companies to consider Web Based VPN Software Alternatives – “Browser-based remote access services offer both cost and ease-of-use advantages. Web browsers are already present on nearly every computing device, public or private, large or small. Web-based solutions use this browser and dynamically downloaded code to avoid installing and configuring VPN client software on the worker’s device. This approach facilitates remote access from just about anywhere and can significantly reduce per-user VPN administration costs.  Savings are even greater for companies that eliminate corporate laptops by leveraging existing desktops for Web-based remote access.”

MyWorkDrive.com’s browser based file access software helps companies reduce their VPN support costs while reducing their security exposure risks.  User’s simply open a browser to access their work files using their existing Windows Active Directory credentials.  Once logged in they can access company shares, home drives and edit/view documents online.  For security all MyWorkDrive clients also support DUO Two Factor authentication.  Even if only half of a company’s employees are directed to use MyWorkDrive’s Browser Based File Access client they can achieve annual savings of up to 50% while improving security.