FREE for 14 Days
Full featured trial with secure
FTP, file sharing & web transfer


Gateway (for Serv-U FTP & MFT Server)

Serv-U Gateway

No data in the DMZ

Serv-U® Gateway is the secure addition to the Serv-U MFT Server that allows you to safely terminate file transfer connections in your DMZ. A two-tier deployment involving Serv-U and Serv-U Gateway satisfies most "managed file transfer" requirements and allows you to

  • Terminate all incoming transfer connections (whether using FTP, FTPS, SFTP, HTTP, or HTTPS) on a hardened server located in your DMZ segment
  • Ensure no data is ever stored in your DMZ segment, encrypted or otherwise
  • Avoid any inbound connections from your DMZ segment to the internal network


Serv-U Gateway's role is similar to that of a "reverse proxy server" in front of your Web applications or the "email relays" in front of your primary mail servers. It safely handles traffic that should not be passed directly from the Internet into internal systems.

Serv-U Gateway provides in-depth defense to Serv-U deployments. This type of architecture is essential to meet PCI DSS, managed file transfer and other high-security requirements.


Secure File Transfer in DMZ Networks with Serv-U Gateway


Serv-U Gateway Feature Highlights


  • No data at rest in the DMZ—ever.
  • No inbound connections from DMZ to internal network.
  • Configured by Serv-U Management Console (no local configuration).
  • FIPS 140-2 cryptography.
  • Exceeds PCI-DSS and other high-security policies requiring "multi-tier" or "multiple zone" deployments.
  • Preserves original client IP address - useful for IP lockouts, whitelists, blacklists, and session monitoring.

Minimal Serv-U Deployment

Serv-U MFT Server with Serv-U Gateway Cluster


  • Supports active-active N+1 horizontal scaling.
  • Native 64-bit and 32-bit applications maximize performance and avoid 'compatibility' modes.
  • No dependencies on Java, .NET, IIS or other 3rd-party technologies.

Ease of Use

  • Install and configure in under one hour.
  • 100% GUI configuration—no fumbling with text files.
  • Configure and monitor from your existing Serv-U management console.
  • Test alongside production or export your configuration and build a stand-alone proof of concept.
  • Unlike generic proxy servers, presents Serv-U with client IP addresses instead of proxy's IP address.
Learn More >>

Serv-U Gateway Management Console

Portability and Support

  • Supports Serv-U and Serv-U Gateway on different operating systems (including Windows/Linux)
  • Supports Windows Server 2012, 2012 R2, 2008, 2008 R2, 2003 and Windows® desktop operating systems.
  • Supports Red Hat® Enterprise Linux® (RHEL) v6, Fedora®, Ubuntu™, OpenSUSE™, Linux Mint™, CentOS™ 6, and Amazon® Linux AMI for EC2.
  • Supports Serv-U and Serv-U Gateway on different operating systems (including Windows/Linux)
  • Supports EMC VMware®, Oracle® VirtualBox and other virtualization software.
  • Supports both IPv4 and IPv6 connections.*

* = Incoming IPv4 and IPv6 connections are terminated on the Serv-U Gateway and proxied over IPv4 connections established from Serv-U to Serv-U Gateway.


Learn More