SecureFX^®

User authenticationWML

SecureFX supports password, public key, Kerberos v5 (via GSSAPI), and keyboard interactive when connecting to SSH2 servers. Public key support includes RSA (up to 16,384 bits), Ed25519, ECDSA (RFC 5656), DSA, PuTTY PPK, OpenSSH certificates, and X.509 including smart cards (PIV/CAC). Support for FTPS (FTP/TLS) mutual authentication is supported using self-signed certificates.

Credentials managementWML

Saving sets of credentials simplifies local password management within SecureCRT and SecureFX. Rather than specifying credentials for each saved session, sessions can reference a global set of credentials, making it easier to update stored passwords. This is especially helpful when monthly, weekly, or even daily password changes are required.

Public Key AssistantWML

Support for Public Key Assistant makes uploading public keys to an SSH2 server simple and safe for end users.

Data encryptionWML

Choose from a wide selection of ciphers including ChaCha20/Poly1305, AES-GCM, AES-128-CTR, AES-192-CTR, AES-256-CTR, AES-128, AES-192, AES-256, Twofish, and 3DES to ensure strong data encryption.

Data integrityWML

Guarantee the integrity of each message sent over the network (preventing replay or insertion attacks).

Host key managementWML

SecureFX allows host keys to be viewed, imported, and exported.

SSH Agent supportWML

Once you register keys with Agent, re-authentication is automatic even if SecureFX has been closed. Keys can be added and removed using Manage Agent keys on the Tools menu. Keys can be specified to preload into SSH2 agent when SecureFX starts.

X.509 certificate user authentication supportWML

Smart card-based public-key authentication using X.509-compatible certificates supports highly secure two-factor authentication. SecureFX supports the PKCS #12 (.pfx) standard file format for X.509 certificates and private keys (Windows). PKCS #11 is also supported, allowing a cryptographic token interface to be used. X.509 host key checking automatically accepts the host key if the certificate is valid.

GSSAPI supportWML

Support for GSSAPI secured key exchange for SSH2 connections. Mechanisms supported depend on GSSAPI provider. Only the Kerberos v5 mechanism has been tested. For SSH2 connections, the Service Principal Name (SPN) can be specified in the GSSAPI Properties dialog.

PGP compatibilityWML

Support for pre- and post- transfer commands allows actions such as PGP encryption and decryption to be executed.

Multiple protocol supportWML

SecureFX supports SSH2, SFTP, FTPS (FTP/TLS), HTTPS (WebDAV and S3), SCP, and legacy FTP in a single client, providing the maximum in flexibility when connecting to a range of remote servers.

Site synchronizationWML

Select local and remote folders or server-to-server. Choose from upload, download, and mirror options. Filtering with wildcard support allows files to be included or excluded during a synchronize operation, which makes it possible to do things like exclude an .svn folder. Multiple sites are easy to keep synchronized with a synchronize database that supports saving, editing, and executing synchronize operations. This is also supported in SFXCL (Windows and Linux only).

Synchronized file browsingWML

A "Synchronize File Browsing" option allows lockstep navigation of local and remote folders that have the same directory structure. When doing synchronized browsing, the remote session will be paired with its own local window.

Multiple simultaneous connections and transfersWML

Set up all of your connections and transfers in one SecureFX application window — avoid cluttering your desktop.

Complete overwrite controlWML

Eliminate accidental overwrites of files with SecureFX's option to configure the action for existing files. Options include: "confirm," "always," "never," or "if older."

"Relentless" file transferWML

Automatically reconnect after a broken connection and resume the transfer.

Resume file transfersWML

Resumes transfer of one or more files, which saves time, especially with large files.

Task schedulerW

The built-in task scheduler allows you to schedule transfer and synchronize operations. Tasks can be run once or set to run at daily, weekly, or monthly intervals.

Throttle transfer bandwidthWML

Limit the bandwidth used during file transfers to keep from consuming all available bandwidth.

Specify number of parallel transfersWML

Specify the number of parallel file transfers, and as transfers are completed, queued files will continually fill available slots.

Move filesWL

Transfer and delete files in one step with the /Move flag in the SFXCL command-line utility (Windows and Linux only). Drag-and-drop move is also supported by holding down the ALT or SHIFT key.

Transfer queueWML

Drag files to the transfer queue, resize the transfer queue window, and hide or show columns. Transfers are done serially, preventing errors if the remote server doesn't allow multiple connections.

File transfer server supportWML

A wide range of file transfer servers is supported by SecureFX including Windows, Linux/UNIX, macOS, MVS, VMS, and many others.

SFTP ASCII file transfer optionWML

Text format files can be sent as raw text rather than in binary format for more compatible transfers of files like HTML and server logs between different operating systems.

Tabbed sessionsWML

Keep your sessions organized by grouping them together as you like. Layout options include vertical, horizontal, and a single group.

Drag-and-drop from Windows ExplorerW

SecureFX allows you to drag-and-drop files between a remote server and your desktop, Windows Explorer, and other applications like WinZip.

Address barWML

An editable address bar shows the current path of the local or remote session as well as a history of the most recently used paths, allowing you to navigate easily between paths, type paths, or copy and paste paths to and from the clipboard.

Connect barWML

Use a text entry box on the toolbar to quickly connect new sessions. Autocomplete filters sessions in a drop down list as you type so you can find saved sessions faster. The Connect bar supports command-line options for maximum flexibility.

BookmarksWML

Set and reuse bookmarks to save time accessing directory locations used regularly, especially if directories are several levels deep. A Bookmark Manager allows bookmarks to be modified and copied from another session. A bookmark button on the address bar makes it easy to access your bookmarks with single click.

Filter ViewWML

Quickly find specific folders and files in local and remote windows by using the toolbar filter. Wildcards make it easy to find the exact set of files you want to transfer.

Quick ConnectWML

Simple interface to connect with minimum setup; select a protocol, enter a hostname and connect. Quick Connect dialog supports SFTP, FTP, FTPS (FTP/TLS), HTTP, HTTPS, and SCP.

New Session wizardWML

Guided setup simplifies the creation of new sessions.

Sound notificationsWM

Set up SecureFX to be notified by a sound when a transfer completes, when a synchronization operation completes, when a session connects, when a session disconnects unexpectedly, or when there is an error.

Customize the toolbar and menuW

Support for dragging and dropping toolbar and menu items, making it easy to modify the menu and toolbar to suit your needs.

Dark modeWML

The system Light or Dark display setting is honored by the SecureFX application window. On Windows, the option to set a display theme is provided.

Multiple platform supportWML

SecureFX is available for commonly used Windows (32- and 64- bit), macOS, and Linux platforms. For a complete listing of supported platforms, see the System Requirements page.

Auto check for updatesWML

Ensure you are running the latest version of SecureFX by checking for updates automatically at startup. When this option is selected, SecureFX automatically checks for an update that is valid with the current license.

Integration with SecureCRT®WML

When both clients are installed together using the bundle installer, SecureCRT and SecureFX can share global options, session options, and the host key database so you only need to perform operations like setting application defaults, connection settings, or accepting a server's host key once. SecureCRT and SecureFX can share passwords and passphrases while either application is running. Click on a toolbar button to launch the other application and connect to the current active session.

Firewall supportWML

A wide range of firewalls are supported, including SOCKS4, SOCKS5, CSM, WinGate, WinProxy, and Raptor, unauthenticated and basic HTTP proxy, and generic proxy. A "Proxy command" firewall type allows a local proxy command to be run when connecting to a remote server.

Dependent session optionWML

Link a session to an SSH2 session that it depends on, which allows connection to a jump host before connecting to other sessions.

Session ManagerWML

The dockable Session Manager lets you quickly connect to sessions. The Session Manager pane can be positioned on the left, right, top, or bottom of the SecureFX window or undocked as a modeless dialog. The "classic" Connect dialog is still supported. The Session Manager filter bar helps locate sessions quickly in the session database.

Site organizationWML

Create custom sessions and organize them in the Session Manager in any order as well as alphabetically. Use friendly site names, move sites anywhere in the site tree, and copy/paste site definitions. Multiple sessions can be selected and then edited, making it easy to do things like change the password for a group of sessions.

Personal data folderWML

Optionally store logon credentials separate from other session data. This makes it safer to store sessions in the cloud or on a network drive and makes it easier to share sessions with colleagues.

Import/export configurationWML

An import/export tool makes it easier to backup SecureFX settings or copy them from one machine to another. Export the entire session database or just a folder or specific session.

Busy site retryWML

Automatically reconnects to sites that refuse an initial connection because of too many users.

Quote commandsWML

Send server-specific commands beyond the standard FTP set.

Keep-alive optionWML

Keeps connection busy when not in active use to prevent it from being disconnected by a server.

Paste URL commandWML

Copy FTP addresses from an email or a browser and open the site in SecureFX.

OpenSSH public and private key format supportWML

Generate keys in OpenSSH format or convert VanDyke Software format private keys to OpenSSH format so that the same keys can be used with other Secure Shell clients.

Enhanced host-key managementWML

Key management in SecureFX includes the ability to view, import, and export host keys.

Remote file editingWML

Right-click on any file on the remote site and open it for editing. Optionally, the file being edited is uploaded to the remote server each time the file is saved on the local machine.

Command-line automation with SFXCL utilityWL

Use SFXCL to automate routine secure file transfer operations with batch scripts. Combined with public key-only authentication, it is possible to automate secure, unattended file transfer processes. SFXCL also supports deleting, renaming, moving, and listing files.

Change file permissions on serverWML

Change read/write/execute permissions as allowed by logon.

Upload file permissionsWML

Specify file permissions for uploaded files.

Use environment variables in pathsW

Use environment variables like APPDATA, TEMP, and USERPROFILE in paths specified in SecureFX global and session options, making it easier to move or copy settings to other machines and to create configurations that will work for multiple users.

Execute local shell commandWML

Do port knocking or run a batch script before connecting to a session using the execute local shell command option.

SCP sudo commandWML

When connecting to an SCP session, SecureFX can issue a configurable sudo command, giving you the flexibility of switching to a different user after the connection is established.

Resolve symbolic linksWML

Select this option to automatically resolve symbolic links.

MSI installersW

MSI support allows you to distribute the applications through your distributions server using Group Policy and to automate installs through SMS or other install programs.

Autohide dot filesWML

With this option on, dot files such as .cshrc and .login are not displayed and do not clutter the file listing.

Default upload file permissionsWML

Whether you need to make sure only you can read your files or make sure that the uploaded files are readable by the world, you can define UMASK permissions for each site to get the needed results.

Time zone configurationWML

Set remote time zone manually for accurate time/date comparisons between local and remote.

Filename conversion on uploadWML

Force filenames to lowercase or uppercase.

Enhanced file permission tools WML

Change permissions on multiple files at the same time. When connected to VShell® for Windows, the Properties dialog for the remote file or folder has a Security tab that allows ACL permissions to be viewed.

IPv6 supportWML

IPv6 addresses can be specified as session hostnames.

FIPS 140-2 supportW

When an administrative option to run in "FIPS Mode" is set, SecureFX uses a FIPS 140-2 validated cryptographic library and only allows FIPS-approved algorithms.

Free evaluation copyWML

Official software releases can be downloaded and evaluated for 30 days without charge.

Open beta software releasesWML

Beta software releases can be downloaded and evaluated for 30 days without charge.

One-year software updatesWML

All registered users receive a year of software updates. An option with three years of updates is also available.

One-year technical supportWML

All registered users receive a year of technical support by email from VanDyke Support. An option with three years of technical support is also available.

Software maintenance availableWML

Software updates and support are available after the first year for multi-computer licenses.

U.S. Rehabilitation Act Section 508 complianceW

Section 508 requires Federal agencies to make their electronic and information technology accessible to people with disabilities. SecureFX has been registered as a compliant product with the Section 508 database. Voluntary Product Accessibility Template (VPAT) documents detailing this compliance are available in Acrobat PDF format here: view the SecureFX VPAT.