Bezpečná výmena súborov

A Prague-based technology company introduced Sofia – a solution for the secure exchange of large files that don’t fit into e‑mail. The system combines multiple antivirus engines and sandboxes to prevent malicious code from getting through. The talk explained why this matters for companies, how Sofia works, and how it is deployed.

Why e‑mail and public file lockers aren’t enough

In companies, it’s common that attachments above a certain size don’t get through e‑mail, yet it’s also desirable to thoroughly inspect every file. Many larger organizations therefore routinely block public file lockers and sharing services at their firewalls if they don’t meet the required security standards. The Sofia solution is placed in the DMZ and aims to achieve the same level of control as modern e‑mail gateways, so that malware or ransomware does not penetrate the internal network.

Security rests on a combination of multiple technologies: the base configuration includes roughly six antivirus engines and two sandboxes, with the selection expandable according to the customer’s preferences. The company has long worked with proven technology partners, for example integrating with FortiSandbox. Since there are only a few sandbox platforms on the market, it makes sense to combine them appropriately with traditional antivirus engines, which catch signature-based threats, while sandboxes cover suspicious behavior.

How file exchange with Sofia works

Sofia runs as a web application in the DMZ and requires no client. An external partner opens a web page, uploads a file, enters an e‑mail address, and the internal user then receives a long link, which can be password-protected. The entire process is optimized for mobile devices as well, so sending or receiving works comfortably from a phone or tablet. In this way, you can safely replace ad‑hoc sending of large attachments or the use of unvetted file lockers.

Technically, the solution is built on Linux and operates as a browser-based service, which simplifies administration and deployment. In corporate environments, it connects to directory services such as Active Directory, ADFS, or Azure AD and supports multi-factor authentication, especially for external access. The system has undergone penetration testing by an independent team of ethical hackers. In addition to communication with the outside world, it is also used for file exchange between branches or teams within a single corporation, including encryption.

Deployment, operation, and support

The company offers a quick demo over a video call and lets customers choose their preferred security engines. A trial environment is available, which can be deployed on‑premises or in the cloud. In production, the solution is used either in the customer’s infrastructure or in hosted environments, with the most widely used public clouds supported. This flexible model helps adapt to internal policies as well as regulatory requirements.

In practice, a topology-based approach has proven effective, where common file lockers are blocked at the perimeter and only the Sofia application is allowed in the DMZ. It ensures every file is inspected through multiple layers – from antivirus engines to sandboxes – and only then delivers it into the organization’s interior. It thus provides businesses with a higher degree of assurance than e‑mail alone or standard file sharing can offer. The result is more convenient and, above all, predictable security when transferring data.

Secure File Exchange

Why e‑mail and public file lockers aren’t enough

How file exchange with Sofia works

Deployment, operation, and support

Petr Chmelík

Secure File Exchange

Why e‑mail and public file lockers aren’t enough

How file exchange with Sofia works

Deployment, operation, and support

Petr Chmelík

Páčil sa ti článok? Zdieľaj ho a povedz o ňom aj ostatným