Access - Unregistered Senders

Administrators use this page to control if unregistered users can send packages. These settings are applied as policy for the current organization.

Important: Ad Hoc Transfer must be enabled before users can leverage these settings. Go to SETTINGS > Ad Hoc Transfer > Access > Registered Senders and for Can unregistered users send packages to registered users? select Yes.

• To allow guest access for unregistered senders and recipient

1. Ensure that guest users are allowed and Ad Hoc Transfer is enabled.
2. Go to SETTINGS > Ad Hoc Transfer > Access > Unregistered Senders.
3. For the option Can unregistered users send packages to registered users? select Yes.

Unregistered Senders Policy Control

A statement at or near the top of the section will state whether Ad Hoc Transfer is set to provide temporary or guest access for unregistered senders. This reflects your selection on the Ad Hoc Transfer - Access - Unregistered Recipients page, in the first prompt.

Note: If you have not allowed users to send packages (on the Ad Hoc Transfer - Access - Registered Senders page, in the first prompt, by selecting either the first or third option), a statement will be displayed on the top of the Unregistered Senders section to inform you that these settings will not be used because Ad Hoc Transfer is disabled. It will say: Ad Hoc Transfer is not enabled for all users. None of the settings on this page will take effect; to change this, go to the Registered Senders setting page. (To change this, go to the Ad Hoc Transfer - Access - Registered Senders page. Under the first prompt, select the second option.)

Can unregistered users send packages to registered users?

This setting specifies whether unregistered users are allowed to self-register to send.

• No. Only registered users can initiate: Unregistered users cannot self-register to send a package.

  Note: If you select this option, no additional prompts are displayed on this page.

• Yes. Unregistered users may send to registered users: MOVEit Transfer will allow unregistered users to self register to send a package to registered users. (On the MOVEit Transfer Sign On page, users will see the Don't have an account? prompt and Register and Send Files link.)

  Note: If you select this option, additional prompts are displayed on this page.

Note: The next prompts and their setting options (in the Unregistered Senders section of this page) are tailored to either Temporary Users or Guest Users, based on your selection on the Ad Hoc Transfer - Access - Unregistered Recipients page, in the first prompt.

... if they are enabled as Temporary Users

Note: The following prompts and options are shown if Temporary User is selected on the Ad Hoc Transfer - Access - Unregistered Recipients page, in the first prompt.

Can unregistered users send packages to temporary users?

Note: This prompt is displayed only if Temporary User is selected on the Ad Hoc Transfer - Access - Unregistered Recipients page, in the first prompt.

• No - only to registered non-temporary users: MOVEit Transfer will not allow temporary users to send to other temporary users.
• Yes - Unregistered users may send to temporary users: MOVEit Transfer will allow temporary users to send to other temporary users.

Can temporary users send packages to additional registered users?

Note: This prompt is displayed only if Temporary User is selected on the Ad Hoc Transfer - Access - Unregistered Recipients, in the first prompt.

• No - Temporary users can only send to the users in their address book: After the first package sent, for all subsequent sends, MOVEit Transfer will not allow temporary users to send to any registered non-temporary users that are not already in their address book.
• Yes - Temporary users may send to any registered users.: After the first package sent, for all subsequent sends, MOVEit Transfer will allow temporary users to send to any registered non-temporary users that are not already in their address book.

How do unregistered users self-register?

• Allow Unregistered Users to answer a Captcha question: When you use this setting, unregistered senders will experience the following when they click a link to self-register to send. The Register and Send page will provide a Captcha box for instant verification. The unregistered user will enter the email address of their intended recipient along with their own email address. Then, if the user successfully fills out the Captcha, they are signed into MOVEit Transfer.

  If you are enabling reCAPTCHA for the first time, you will need to add the public and private keys. For more information, see the topic titled User Auth.

• Send a time-limited set password link to each temporary user: The Register and Send page will enable the unregistered user to enter and submit the email address of their intended recipient along with their own email address. For verification, MOVEit Transfer sends the self-registering user an automated link by email. The link opens a MOVEit Transfer page without requiring a password. The linked to page allows the recipient to enter a username and request a password. MOVEit Transfer then sends the self-registering user a second email with another link that again logs them into a page without using a password, and then they can proceed from that point.
• Send an automatically generated password to each temporary user: The Register and Send page will enable the unregistered user to enter and submit the email address of their intended recipient along with their own email address. MOVEit Transfer sends the self-registering user an automatically generated password by email. The password and link allow the recipient log in and proceed from that point.

... if they are enabled as Guest Users

Note: The following prompt is shown with these two options if Package Password is selected on the Ad Hoc Transfer - Access - Unregistered Recipients page, in the first prompt.

How do unregistered users self-register?

• Allow Unregistered Users to answer a reCAPTCHA question: See the description and instructions above for the same prompt and setting for Temporary Users.
• Send Guest Access code and an automatically generated password: See the description above for the same prompt's last (third) setting for Temporary Users. (The options are worded slightly differently, but the description of the option for Temporary Users applies to this Guest User option as well.)

... if they are either Guest or Temporary Users

Note: The following prompt is always displayed.

Maximum Recipients

This setting allows administrators to limit the number of recipient email addresses that the self-registered sender can enter in their first or only package. This helps prevent newly self-registered users from sending to too many users.

Permitted Email Domains

This section allows administrators to limit the domains for the registered recipient email addresses. This helps prevent users from sending to certain registered users if they should be unable to. The domain list is a comma-delimited list of domains to match against. The rule settings determine whether matched domains will be allowed or denied.

Unregistered Sender Remote Access Rules

This section allows administrators to limit the Hostnames and IP addresses and ranges for unregistered sender remote access. This helps prevent or allow unregistered users access. The rule list is created and edited on a separate page accessed from the Edit Access Rules link. The existing access rules are listed on the Unregistered Senders page. At runtime, the rules will be processed in the top-to-bottom order displayed here.

There are several columns for each rule as follows:

• Rule: Whether the rule allows or denies access.
• Hostname/IP: The IP address or hostname of each rule.
• Comment: Any hint or notes the administrator wants to provide. Anything typed here is informational only and does not affect any other part of the rule.

In addition, an Edit Action Rules link below the last rule opens a separate page for editing and adding access rules. Click this link to open the Unregistered Sender Remote Access Rules page.

Unregistered Sender Remote Access Rules Page

On this page, you can change details about the rules.

Buttons and links are provided for the various actions which may be performed on each rule.

• UP and DOWN arrow buttons: Move the rule up and down in the priority list - rules at the top of the list are processed first. (These buttons appear only when there are two or more rules.)
• Edit: Allows administrators to change details about the rule; opens the Edit Remote Access Rule page.
• Delete: Completely removes the rule from the access list.

In addition, the Add New Remote Access Rule link (below the last rule) opens the Add Remote Access Rule page, where new rules can be added.

Note: See the Web Interface - Settings - Security - Remote Access Policy subsection Add Remote Access Rule and Edit Remote Access Rule Pages.