Is MetaDefender Managed File Transfer compatible with a Windows Server 2022 system that has been hardened according to CIS Level 2 Benchmarks?

Yes, MetaDefender Managed File Transfer (MFT) has been tested by OPSWAT on the AWS-provided Windows Server 2022 CIS Level 2 hardened image. During functional testing, no issues were encountered, and MFT operated as expected.

Important Considerations

While testing was successful, it is important to note that:

• Custom policy modifications made beyond the standard CIS Level 2 hardening may affect MFT's behavior.
• Variations in security settings, network configurations, or additional system hardening could introduce compatibility issues depending on your specific environment.

Recommendation

To ensure optimal performance and compatibility, we recommend performing validation testing with your hardened Windows Server 2022 system before deploying MFT to production.

This will help confirm that all MFT functions operate correctly within your customized security environment.

Restrictions

Only allow access to our domain only

if ($host !~ ^(example.in|www.example.in|images.example.in)$ ) {

  return 444;

}

Deny certain user-agents

Blocking user-agents i.e. scanners, bots, and spammers who may be abusing your server.

## Block download agents ##

​

if ($http_user_agent ~* LWP::Simple|BBBike|wget) {

  return 403;

}

​

##

​

## Block robots ##

​

if ($http_user_agent ~* msnbot|scrapbot) {

  return 403;

}

​

##

​

Block referral spam

​

Only direct access is allowed

​

## Deny certain Referers ###

​

if ( $http_referer ~* (babes|forsale|girl|jewelry|love|nudit|organic|poker|porn|sex|teen) ) {

  return 403;

}

​

##

Block particular APIs

## Block particular api ###

​

location ~ "^/admin/config/session$" {

  return 403;

}

​

##

How to configure

Step 1: Create a .conf file under <Installation Directory>\WebServer\conf\

Here is sample .conf file. Choose what meets to your scenario and update .conf file

if ($host !~ ^(example.in|www.example.in|images.example.in)$ ) {

  return 444;

}

​

if ($http_user_agent ~* LWP::Simple|BBBike|wget) {

  return 403;

}

​

if ($http_user_agent ~* msnbot|scrapbot) {

  return 403;

}

​

if ( $http_referer ~* (babes|forsale|girl|jewelry|love|nudit|organic|poker|porn|sex|teen) ) {

  return 403;

}

Step 2: A restart of the “OPSWAT MetaDefender MFT” services are required.