...
It is also important to know that SkySync Client Solutions is highly experienced in the art of transfer solution optimization. They are available to help ensure transfer projects are executed as efficiently and effectively as possible.
SkySync Connections and Security
SkySync stores connection information (ex. user name, password, url, unc, etc.) for some platforms encrypted in its database. This makes it important to secure the server running SkySync’s local file system to add additional protection to this information.
Future versions of SkySync may use additional strategies to encrypt and protect connection information like the DPAPI (data protection API) or DPAPI-NG (next generation), along with customer controlled encryption with an encryption key provided by the user at install time. When migrating SkySync to another server it may be necessary to copy encryption key files manually to ensure shared databases can correctly decrypt this sensitive data.
Cloud platforms, use other authentication mechanisms like OAuth2 and only present an access token to SkySync instead of allowing visibility into credentials.
In general, SkySync does not control, edit, move, modify, or otherwise interact with security directly. SkySync acts as an external user to storage systems, interacting with them via their public API’s.
For more information on SkySync and security please see the SkySync Security document.
...
Recommendations:
• Determine up front as part of your security design how SkySync will access the content you will ask it to transfer. Consider SkySync another “power user” in your organization manipulating content.
• Integrated Authentication scenarios can be tricky to configure due to Windows Service Identity and other (ultimately) permissions based issues.
• Avoid creating lots of connections by correctly defining security permissions, groups, and proxy users. SkySync works best with platforms that have rich API support for concepts such as On Behalf Of, setting time stamps, and methods of ownership preservation.
Summary
The purpose of this document was to provide SkySync customers with the background information and prescriptive guidance necessary to maximize transfer throughput while also minimizing the overhead of managing the SkySync solution. The information in this document will be instrumental for organizations that are able to manage their own transfer jobs.
...