These 6 questions will help you determine if a vendor’s offering will:
- Increase the reliability of your file transfers and the key processes they support
- Reduce the security exposure you have in moving key info inside and outside your organization
- Scale to support rapid growth in volume, size and number of connections
When you embark on a file gateway consolidation project, there are hundreds of questions you may have thought of, and many that may not have even occurred to you. It all depends on where you are in your Managed File Transfer journey. As the leader inManaged File Transfer (MFT)solutions, IBM has fielded many questions about file gateway consolidation over the years. That’s why we want to share with you the six questions that you should be asking every vendor you evaluate.
These questions, while not comprehensive, will uncover some of the biggest challenges that cause many companies to switch to IBM after choosing another vendor. Usually that first choice makes obvious the complexities of MFT and illustrates why a strong multi-protocol, multi-process file gateway solution is needed. We think you should investigate all your options. Just make sure to ask these questions of any vendor you consider in your short list for a new consolidated file gateway solution.
1. How does your solution scale to handle increased volumes, simultaneous sessions and a growing number of connections?
While every solution can allow you to purchase additional copies of the product, how seamless is the management, setup and expansion as your loads increase? Where are the bottlenecks, as volumes go up — in the processor, memory, or database? What has been tested and what configuration is required to support that?
While performance benchmarks are just representative, it is important for a vendor to have the information available to give you guidelines. As you think about how big is big enough, look at your historical volumes and examine new initiatives, like geographic expansion or new business strategies to project your volumes into the future. Realize that a new consolidated file gateway will need to last five to eight years before you can consider replacing it.
Because our solutions handle some of the most demanding workloads in the world, we think about, plan for and test our file gateway software to make it ready for your business needs. A technical performance paper is available for download here, which provides real-world numbers on howIBM File Gatewayperforms.
2. How does your solution secure transfers beyond link encryption?
Because of the sensitive nature of files that are transferred via a File Gateway, security is a key issue. Everything from purchase orders to payment instructions needs to be secured. For most vendors, a security discussion centers on encrypting the transport layer with HTTPS, FTP/S or SFTP. While this
is a necessary first step (one that all vendors should be able to do), it is not nearly enough for most enterprises.
Advanced security capabilities now focus on three key areas.
- Credentials:Making sure a connection is truly from a trusted partner, including things such as multifactor authentication, which means using multiple ways to validate a connection, like IP address, certificate, ID/password, and security token.
- DMZ traversal:Protecting the internal trusted zone from outside-initiated connections, including things like proxies, defense in depth deployments, closing all inbound transfer ports in the firewall, and anti-virus scanning.
- Defense at rest:Encrypting the data as it processed by the file gateway, including data-at-rest encryption.
At IBM, we continue to look for ways to improve the security for your enterprise.
3. What high availability (HA) options and configurations are available?
When you trust all your external file exchanges to one solution, it has to be highly available and resilient to many types of failures. Most vendors will support clustering to work with load balancers, but the difficulty is often with a central database. Even with HA options on the database, there are issues like maintenance, indexing, corruption and schema updates that require a recycle.
IBM innovation brings you closer to delivering an “always on” file gateway. Advanced communications can be an optional feature integrated within IBM File Gateway that creates an abstracted communication subsystem from the document processing. That way, if applications or back-end processes get disrupted by a planned or unplanned outage, your communications are still able to receive documents from trading partners.
Ask the tough questions when it comes to service level agreements, disaster recovery and high availability., because your internal and external partners will.
4. What applications, platforms, databases and infrastructure does your solution integrate with and run on?
Your organization has no doubt standardized on some common infrastructure items that you have developed expertise around that will be important to leverage. Make sure that your vendor supports your key infrastructure components. But don’t fall into the trap of thinking that just because you have standardized on a particular database, you need look at that vendors’ file gateway solutions first.
The biggest mistake that many firms make is getting a solution that locks them into one platform. This limits many future choices in infrastructure, even if it works today.
Most firms will want connectivity into other common services in their organization. Whether this includes directory services like LDAP/Active Directory, common infrastructure like data warehouses, message busses, reporting/analytics or problem ticketing systems, make sure you ask before you buy. If the vendor does not have pre-built support, make sure you evaluate the strength of the integration point’s highlighted in question five as well as your expertise to build them yourself.
5. What integration points/APIs does your solution offer for extension?
Every solution will need to be extended, customized or integrated with something you have not even thought about yet. That’s why it’s important to investigate how committed a vendor is to opening ways to help you do this, both now and in the future. It is also important to determine how many extensions are prebuilt, versus coding on your own. Specifically, ask if they have:
- APIs for every function— ones that are available or discoverable in a library
- A way for users to share extensions they have built
- A partner community with expertise that’s ready to build integrations and extensions for you
- Pre-built adapters to integrate with applications
IBM continues to advance its integration capabilities as demonstrated by the new RESTful APIs forIBM Control Center. For example, one IBM customer was experiencing such communication delays from China they built an inventory availability service through chat using the IBM platform.
6. What operational monitoring, reporting and visibility capabilities does your solution offer?
To provide an enterprise-wide consolidated service, a file gateway must give you the operational information to deliver higher levels of availability and service. While every solution gives you basic track and trace, the leaders provide advanced notifications, reporting, and visibility capabilities.
IBM File Gatewayprovides a high level of integrated visibility in the base product, while also offering an optional monitoring and governance solution. IBM Control Centertracks the critical events across your B2B and managed file transfer (MFT)software for improved operations, customer service, and B2B governance. It applies rules to alert key audiences when there is a problem with a server, process, ss, or transfer. Actionable dashboards are customized for various types of users, including operations staff, IT governance, risk and compliance (GRC) professionals, and line-of-business (LOB)
customer service representatives.