Skip to main content
Feedback

MFT Runtimes

Updated 

MFT Runtime allows Cloud to LAN or LAN to Cloud file transfers. It can transfer files within your enterprise firewall, allowing LAN to LAN transfer, yet orchestrated and managed by the MFT cloud.

Use the online administration portal to re-configure, pause/resume, restart, or update MFT Runtimes.

Configurations are retrieved by the runtime via outbound polling using an HTTPS connection.

  1. From the Organizations page, click the organization for which you want to create an MFT Runtime, then click the MFT Rutnimes tab.

  2. Click Add MFT Runtime.

  3. In the MFT Runtime Name field, enter a name for the runtime.

  4. Optional: Enter a description.

  5. Under Alert Configuration, select one of the following options:

    • Disabled - Alert emails are disabled. Alerts will continue to be generated on the Alerts page.
    • Instance Admins - (Default) Alert emails will be delivered to all instance administrators.
    • Email List - Enter email addresses for alerts.

  6. Anti Virus actively invokes a Microsoft Defender AMSI scan on each transferred file and then reports the outcome to the Control Plane. Files are withheld from the target directory until the scan returns a clean result. Disabled by default.

    note

    Anti Virus is available to Windows MFT Runtimes only.

    When Anti Virus is enabled, you can configure Retry & error handling:

    • Enable back-off between retries - When on, the interval doubles after each attempt up to the maximum. When off, every retry waits the same interval.

      • Retry cycles - The number of times a file is retried
      • Interval between retries - The length of time, in seconds, between retry attempts
      • Maximum back-off interval - The maximum time, in seconds, before the system gives up retrying a scan

    • When retry cycles are exhausted - Leave files in place or Delete the file. The default behavior is to leave the file for error handling.

    Per-file successes and failures are recorded in File Activity. A file that is still failing once its retry attempts are exhausted is recorded as an error and raises an alert. If alert emails are disabled, it still appears on the Alerts page.

    the antivirus settings for MFT runtime

    note

    If you require specific enterprise EDR or antivirus software (e.g., CrowdStrike, SentinelOne), you can deploy local MFT Runtime agents on your own hosts, where local endpoint security agents inspect files at the host level.

  7. Click Save.

From the Actions menu, you can Edit MFT Runtime, View Associated Endpoints, or Delete MFT Runtime.

caution

To successfully complete runtime setup, you must configure at least one File Share endpoint. You can add additional File Share endpoints and associate those endpoints with any MFT Runtimes you have created under MFT Runtimes.

Post-processing settings

You can configure a command for Linux or Windows to run on each file after the MFT Runtime downloads it from the cloud and before it is moved to the target endpoints. The command runs once per file for every flow the Runtime handles.

note

Older Runtimes that cannot run commands must be updated to the latest Runtime version to use the command configuration in this section.

caution

This command processing is defined per MFT Runtime, not per flow endpoint. The command runs on your network with the Runtime's permissions, so you are responsible for the command's security.

  1. Toggle on Enable post-processing.

  2. In Command / executable path, enter the absolute path to an executable or script.

    For Linux, the executable or script is started directly, not through a shell. For Windows, run a script through powershell.exe -File.

    Batch files, such as .bat and .cmd, and cmd.exe are not allowed.

  3. Click Add argument to add an argument. Each entry is passed as one argument, exactly as you enter it. The full path of the downloaded file is always appended as the last argument.

  4. Enter a regular expression for exit codes that allow a file to proceed in the Successful exit-code pattern field. The default value is ^0$.

    Enter a regular expression for exit codes that allow a file to be retried in the Retryable exit-code pattern field. The default value is ^2$.

    Any completed exit code that matches neither pattern uses failure handling. Timeouts and commands that cannot start are execution errors, not exit-code results.

  5. Configure the following Retry & error handling settings. These are applied when the exit code matches the retryable pattern.

    • Enable back-off between retries - When toggled on, the interval doubles after each attempt up to the maximum. When toggled off, every retry waits the same interval.

      • Retry cycles - The number of retry attempts. The default is 6.
      • Interval between retries (sec) - The amount of time, in seconds, between each retry attempt. The default is 300 seconds.
      • Maximum back-off interval (sec) - (Editable only when Enable back-off between retries is toggled on) The maximum amount of time, in seconds, between each retry attempt. The default is 3600 seconds.

    • Select the behavior for when the command fails or retries are exhausted:

      • Quarantine file - (Default) The file is moved to the Runtime's quarantine folder and not transferred.

        • Quarantine folder - (Optional) The absolute Runtime path. Leave blank to use the default quarantine folder.

      • Leave file in place - The file is left where it is for manual handling and the failure is recorded. It is not transferred.

      • Delete file - The Runtime deletes its copy of the file. This cannot be undone and the file is not transferred.

      Per-file success and failure is recorded in File Activity, including the exit code, duration, command line, and result. The command output is not recorded.

      A file that still fails after retries are exhausted or for which the command cannot be started, is recorded as an error and raises an alert. Alert emails are configured in the Alert Configuration section above.

MFT Runtime download

From the MFT Runtime page, you have the option to download the runtime for installation on either Windows or Linux operating systems.

Clicking Download MFT Runtime opens a window with commands to download the runtime.

You can execute this single installation and configuration line on Windows using PowerShell or on Linux through a terminal. This will guide you through the steps necessary to download and configure the runtime.

Refer to MFT Runtime for hardware requirements and installation steps.

On this Page