Access - Unregistered Recipients

This page allows an administrator to configure, for the organization, the policy for sending packages to unregistered users.

Note: If you have not allowed users to send packages to unregistered recipients (in the last prompt of the Ad Hoc Transfer - Access - Registered Senders page), a statement will be displayed on the top of the page. The statement will inform you that these settings will not be used because no one can send to unregistered recipients.

Tip: However, even if have not allowed users to send packages to unregistered recipients, the first prompt under Unregistered Recipients could be used anyway, to determine how unregistered senders will be handled. This will occur if you allow unregistered users to self-register to send packages (in the first prompt of the Unregistered Senders page).

If permitted, how should access be granted to recipients or senders who are not currently registered users?

Note: This setting determines how to handle both unregistered recipients and self-registering senders, if applicable.

This setting specifies whether unregistered users are to be treated as Temporary Users (with their registration expiring after several days) or Guest Users (just for the one-time sending of an individual package).

• Temporary Users: By default, MOVEit DMZ will create a temporary user for each unregistered recipient. See the Temporary User Password and Permitted Email Domains sections below to determine how the temporary user account is handled. You can also change these settings.
• Package Passwords: If you select this option, MOVEit DMZ will allow the unregistered recipient to access the package, but will not create a temporary user. See the Package Password and Permitted Email Domains sections below to determine how the guest user account is handled. You can also change these settings.

Lookup email in LDAP sources...

If the organization uses an LDAP authentication method, you will also see this section under Unregistered Recipients. These settings enable MOVEit DMZ to check if the email address of an unregistered user matches an LDAP entry. In other words, it checks to see if an unregistered recipient has an LDAP account.

• Ignore for all except: By default, MOVEit DMZ will not do an LDAP lookup for unregistered recipients. You can add email domains to the ... these domains: text box, in which case MOVEit DMZ will do the LDAP lookup for email addresses that match a specified domain.
• Lookup for all except: Select this option to enable looking up emails in LDAP lookup+auth sources. When enabled, any potential unregistered recipients for packages (i.e. email address recipients that don't match any internal user) will be looked up in LDAP sources to see if there is a matching LDAP user that currently is not in the MOVEit DMZ system. If a match is found, MOVEit DMZ attempts to add that user to the system, and then updates the package recipient list to send the package to that new user, INSTEAD of creating a temporary user or sending to an unregistered recipient. You can add email domains to the ... these domains: text box, in which case MOVEit DMZ will not do the LDAP lookup for email addresses that match a specified domain.

Temporary User Password

Note: This section is displayed only if you select Temporary Users for the first prompt on this page.

Temporary users are an optional class of users that can be created by any registered user in an organization. To set up a new temporary user, a registered user needs only the email address of the temporary user. The default settings (shown below) allow the sender to add an email address when sending a package, and MOVEit DMZ then automatically creates the temporary user, generates a password, and sends it to the user. This means that when a user sends a package to an unregistered recipient, the recipient will receive two separate emails, the autogenerated message that contains the user password, and the package. All recipients of a package will be sent the same password, and they will be required to change their password on first sign-on.

Be aware that additional information can be added to the user profile at a later time.

Note: If you will have users that access Ad Hoc Transfer using the Outlook plugin, you must select the default option, which is: 'Do not ask the sender for a password, instead:' and 'Send an automatically generated password to each temporary user'

For creating a password, you can have MOVEit DMZ handle the communication with the temporary user by sending an autogenerated password, or sending a set password link, which allows the recipient to create their own password.

You can also assign responsibility for creating a password to the sender, and then auto-send the password, or let the sender deliver the passwords to the temporary users.

Finally, if you have selected to have MOVEit DMZ send passwords, you can choose whether to send the password to a recipient in a separate email, or to include the password in the package notification.

Package Password

Note: This section is displayed only if you select Package Password for the first prompt on this page.

This section lets the administrator set options for using a package password. A package password is sent to a guest user who is the recipient of a package. The password is used for access to that package only. A guest user is different from a temporary user in that a MOVEit DMZ user profile is not created for the guest user. Note, however, that the security settings for Remote Access and IP Lockouts will apply to a guest user.

For creating a password, you can have MOVEit DMZ handle the communication with the guest user by sending an autogenerated password.

You can also assign responsibility for creating a password to the sender, and then auto-send the password, or let the sender deliver the passwords to the guest users.

Finally, if you have selected to have MOVEit DMZ send passwords, you can choose whether to send the password to a recipient in a separate email, or to include the password in the package notification.

Permitted Email Domains

This section allows administrators to limit the domains for the unregistered recipient email addresses. This helps prevent users from adding certain users as either temporary or guest should not be added as such. The domain list is a comma-delimited list of domains to match against. The rule settings determine whether matched domains will be allowed or denied. For example, a list of yahoo.com, msn.com, gmail.com, ipswitch.com will keep people from defining temporary users from some common free email domains and from Ipswitch domain.

Upload/Download Wizard Access

Note: This section is displayed only if you select Package Password for the first prompt on this page.

This section allows administrators to enable or disable access to the Upload/Download Wizard by Guest users (whether recipient or sender).
By default, the option Allow Guest users to take advantage of the Upload/Download Wizard is selected.

Clear the checkbox and click Save to disable access to the Wizard for Guest users.