Secure interface file transfer — S-Trans

Moving to the secure SFTP protocol for file transfer

• Following a significant rise in the number and scale of cyberattacks in Israel and worldwide, we are adding security and protection layers to the transfer service for files currently sent via FTP and S-Link.
• All work is carried out in continuous, close coordination with cyber-security bodies and in line with their recommendations, while taking into account the practical needs raised in the field.
• According to timelines that will be announced, file transfer connections to Segment’s servers will use the SFTP protocol.
• Authentication will be based on a username and a private signing key (PKI) installed on the sending computer. (Note: passwords will no longer be used.)
• To maintain business continuity, customers must prepare in advance and make sure they can connect properly to the new service.

We offer two connection options – your choice

Option A: Self-Managed

Target audience

Companies and organizations that already connect this way with other parties, or that already have a file-sync system (mainly large organizations or cloud systems).

Segment will provide the following

• Segment’s server addresses.
• The username.
• The digital signature file in PFX format
• The password for the PFX file

Important: It is the customer’s responsibility to make sure their operational system supports the connection details provided and can connect securely to Segment’s servers. In this setup, Segment does not provide technical support for the connection.

Cost

• This option is free of charge and is provided as part of the standard connection agreement with Segment.

Service & support

• This option does not include any technical support or SLA for file communication and transfer.

Option B: S-Trans Managed Service

Target audience

Companies and organizations that do not employ a technician experienced in installing computers and software, and want advice, installation and full service from Segment.

Segment will provide the following

• Remote installation of the S-Trans software by a certified Segment expert.
• Full remote support by the support team.
• Up to 3 installations per year (for example, if a customer’s computer crashes).

Cost

• This option involves a one-time installation fee (₪500). As noted, no additional fee is charged for reinstallation up to twice a year.

Service & support

• This option involves a monthly fee of ₪100 for full support on anything related to file transfer, including help investigating a suspected communication issue (for example, orders not arriving).

Server addresses

Segment server address: strans.segment.co.il
Segment server IP address (optional): 194.90.153.69
Port: 22022

Installing the PFX

Install the PFX under Computer Certificate › Personal.
Important: while installing the PFX, select the option “Mark this key as exportable”.

Test user and signature

Username: demo
Signature file password: 47jGq8gA1Y1Q9vb6TEIs7mD11

S-Trans software

Operating system: Windows Server 2016, 2019, 2022, Windows 10, 11
Permissions: permission to run a Service with access to the relevant folders to sync.

Ports and firewall rules
Data: Outbound TCP 22022 To 194.90.153.69 (For Data)
Logs and support bundle: Outbound TCP 443 To apigw.segment.co.il