File Service

This section configures file storage.

Contour

Here you can configure which IP addresses are considered part of the internal contour of the corporate data transmission network (CDTN), as well as define file handling permissions for users within the internal contour.

How to Configure Networks Recognized as CDTN Perimeter?

Specify corporate networks/IPs considered as secure corporate network perimeter — corporate data transmission network (CDTN) perimeter (“contour”). Client device requests will be verified against this perimeter when required.

1. Add subnet IP addresses with masks using /, separating values with commas. Example: 192.168.0.0/24, 10.129.0.0/16.
   You can even specify an exact external provider IP with /32 mask — this IP will also be considered part of the perimeter. Recommended for testing only. Example: 55.66.77.88/32.
   Check your provider-assigned IP on these sites:

   • 2ip.ru
   • Google — search “what is my ip”.
2. Optionally set file transfer permissions relative to the perimeter. Note these will combine with existing role model restrictions.
3. Check the Enabled box and click Save.

How Is Role Model Related to CDTN Perimeter?

Note how the role model operation depends on the contour settings.

CDTN Perimeter Parameters

Parameter	Description
Corporate users can send	Defines who a CDTN user can send files to: any — any user in the federation, regardless of the server they are on. Only a CDTN user can open the file. Files can be sent to open chats, channels, and chats with end-to-end encryption disabled. corporate — a user on any corporate server of any organization (except RTS). Only a CDTN user can open the file. Files can be sent to open chats, channels, and chats with end-to-end encryption disabled. trust — a user on a server with which a trusted connection is established. Only a CDTN user can open the file. Files cannot be sent to open chats, channels, or chats with end-to-end encryption disabled. local — a user on the same server as the sender. Only a CDTN user can open the file. Files cannot be sent to open chats, channels, or chats with end-to-end encryption disabled.
Corporate users can read	Defines who a CDTN user can receive and open files from: any — from any user, regardless of the server. The sender’s and recipient’s contours do not affect file access. corporate — from a user on a corporate server. The sender’s and recipient’s contours do not affect file access. trust — from a user on a server with which a trusted connection is established. local — from a user on the same server as the recipient. contour — from a user on the same contour as the recipient.
Corporate files can read	Defines who can view files sent from the CDTN: any — any user from any server. The sender’s and recipient’s contours do not affect file access. corporate — a corporate user from a sender on a corporate server. The sender’s and recipient’s contours do not affect file access. trust — a user on a corporate server connected via a trusted connection to the sender’s server. The sender’s and recipient’s contours do not affect file access. local — a user on the same corporate server as the sender. The sender’s and recipient’s contours do not affect file access. contour — a CDTN user on the same contour as the sender.

CDTN Contour and End-to-End Encryption

When selecting the Trust or Local parameters, users within the CDTN cannot send files to open chats or chats with end-to-end encryption disabled. When selecting Any or Corporate, sending is possible (starting from server software version 2.9).

File Service Retention

This section allows you to configure automatic deletion of certain file categories from the server after a specified number of days.

Files Sent from Another Server

Note that the File Retention feature activated on the server also applies to files sent by users from other servers. This is because chats and files are uploaded from there to the current server, where automatic deletion will take effect after specific time left.

Cleaning Files by Date and Size

Since version 3.73 in the File Service section, an administrator can delete from the server, as a one-time action, files uploaded during the selected period, files of the selected size, or files that meet both conditions. Use it when the disk runs out of space before files are removed by automatic retention-based deletion.

1. In the Clear files by selected filters block, select a date range, file size, or both parameters.
2. Click Clear.
3. Check the conditions in the confirmation window and click Delete.

Under the button, the panel shows the date and status of the last cleanup: Success, No files found, or Error. In the Last cleanup filters row, the selected dates and size are shown.

Proxying

Proxying settings for static content delivery to public clients: the ability to download a file via File Service instead of a redirect link to S3.

Watermark Configuration

Overlays a special watermark with user, time, and device information on images and videos when they are saved or forwarded from mobile devices, to help trace the source of information leaks. Introduced in server software version 3.69 and mobile clients iOS/Android 3.70.