What's New in MOVEit Transfer 2023.1

With the current release, MOVEit Transfer adds the following features and improvements.

Secure ICAP (Content Scanning)

MOVEit Transfer now supports TLS encrypted communication to AV/DLP scanning engines with secure ICAP (icaps://).

New Controls Enabling Secure ICAP in Settings - System - Content Scanning

Updated Minimum and Default Password Requirements

New MOVEit Transfer installations will require users to meet new minimum settings of character length and complexity when they create a password. The minimum length you can set a password to is a string of 8 characters. The new default value setting for new installations of MOVEit Transfer is 12 characters.

New Default and Minimum Length for Passwords (new default length and complexity values shown)

Multiple SSH Server Host Key Types

MOVEit Transfer now allows you to configure each SSH binding (including the default binding) with one or more host keys. This feature makes it convenient for SSH/SFTP clients to connect to MOVEit Transfer, especially when their policy constraints limit them to use a specific key or key type.

You can add SSH Binding Configuration Options using the controls on the SSH tab of the MOVEit Transfer Config Utility.

SSH tab (running current SSH Server shown)

Pre-populate Default MOVEit Server Address for Outlook Add-in

You can now provide a value for the DefaultMitServerAddress argument in the MOVEit Transfer Outlook Add-in manifest.xml file. This string value pre-populates add-ins with a default server address or hostname.

<bt:Url id="Taskpane.Url" DefaultValue="https://localhost:3000/taskpane.html?DefaultMitServerAddress=moveit.example.com"/>

Outlook Add-in Prepopulated with MOVEit Transfer Hostname

REST API Changes

When an API user sends a MOVE file request and lacks permission to list file(s) in the destination folder, MOVEit Transfer returns an HTTP 201 (OK but with conditions). Otherwise, an HTTP 200 response is still the expected response, which includes details about the moved file(s).

AS2 Default Remote Access Controls (2023.1.16 Hotfix)

As of the 2024.1.7, MOVEit Transfer will Deny remote connections through the AS2 user interface. This is a change from previous behavior. For details, see the section titled Security Policies - Remote Access - Default Rules.