UDMG 3.4.0 Release Notes

Universal Data Mover Gateway (UDMG) 3.4.0 includes the following major new features and enhancements. These release notes also cover UDMG Secure Proxy (USP) 3.4.0.

For a complete list of features and fixes for both UDMG and USP, refer to UDMG 3.4.x Maintenance list.

UDMG

The following features and enhancements were added to UDMG 3.4.0.

Protocols

Change ID Title Description

#49005

Transfer Resume

Change ID	Title	Description
#49005	Transfer Resume	Interrupted file transfers can now resume from the point of failure rather than restarting from the beginning, making it particularly useful for very large files in environments where network interruptions are expected. No user action is required: on each retry, UDMG automatically detects a partial file at the destination and continues from the last transferred byte. Transfer resume is supported for SFTP and FTP(S) in both UDMG as Server and UDMG as Client Pipelines. For uploads (UDMG as Server) and Pull Pipelines (UDMG as Client), resume requires the Stage Files in a Temporary Folder toggle to be disabled on the Local Filesystem Endpoint. For downloads (UDMG as Server) and Push Pipelines (UDMG as Client), resume is supported automatically with no extra configuration required. For more details, refer to Transfer Resume (UDMG as Client) and Transfer Resume (UDMG as Server).
#58507	Multi-level Virtual Paths	UDMG as Server Pipelines now support multi-level Virtual Paths, allowing Administrators to mirror any folder hierarchy required by partner servers. Intermediate directories are automatically derived from the path hierarchy, so no additional Pipeline configuration is required for those intermediate levels. For more details, refer to Virtual Path Hierarchy.
#50554	Move Feature	Scheduled Transfers now support a move operation: the source file is deleted after the transfer and all post-transfer processing (including ICAP scanning) complete successfully. If an error occurs at any point, the source file is not deleted. This eliminates the need for a separate cleanup step when the goal is to move files rather than copy them. Move is enabled by setting `options.move` to `true` in the Scheduled Transfer API request. For more details, refer to Move.

Interrupted file transfers can now resume from the point of failure rather than restarting from the beginning, making it particularly useful for very large files in environments where network interruptions are expected. No user action is required: on each retry, UDMG automatically detects a partial file at the destination and continues from the last transferred byte.

Transfer resume is supported for SFTP and FTP(S) in both UDMG as Server and UDMG as Client Pipelines. For uploads (UDMG as Server) and Pull Pipelines (UDMG as Client), resume requires the Stage Files in a Temporary Folder toggle to be disabled on the Local Filesystem Endpoint. For downloads (UDMG as Server) and Push Pipelines (UDMG as Client), resume is supported automatically with no extra configuration required.

For more details, refer to Transfer Resume (UDMG as Client) and Transfer Resume (UDMG as Server).

#58507

Multi-level Virtual Paths

UDMG as Server Pipelines now support multi-level Virtual Paths, allowing Administrators to mirror any folder hierarchy required by partner servers. Intermediate directories are automatically derived from the path hierarchy, so no additional Pipeline configuration is required for those intermediate levels.

For more details, refer to Virtual Path Hierarchy.

#50554

Move Feature

Scheduled Transfers now support a move operation: the source file is deleted after the transfer and all post-transfer processing (including ICAP scanning) complete successfully. If an error occurs at any point, the source file is not deleted. This eliminates the need for a separate cleanup step when the goal is to move files rather than copy them.

Move is enabled by setting options.move to true in the Scheduled Transfer API request.

For more details, refer to Move.

Security

Change ID	Title	Description
#45070	Signed Authentication Requests (SSO)	UDMG now supports two optional security enhancements for SAML-based SSO: Request signing: UDMG signs outbound authentication requests (AuthNRequest) so the IdP can verify they originate from a trusted service provider. Assertion decryption: UDMG decrypts encrypted assertions in the IdP's SAML response, for IdPs configured to encrypt them. Both features use the same TLS Certificate Pair Credential configured on the SSO provider and operate independently of each other.

Change ID

Title

Description

#45070

Signed Authentication Requests (SSO)

UDMG now supports two optional security enhancements for SAML-based SSO:

Request signing: UDMG signs outbound authentication requests (AuthNRequest) so the IdP can verify they originate from a trusted service provider.
Assertion decryption: UDMG decrypts encrypted assertions in the IdP's SAML response, for IdPs configured to encrypt them.

Both features use the same TLS Certificate Pair Credential configured on the SSO provider and operate independently of each other.

Automation & Workflow

Change ID Title Description

#51269

UDMG Client CLI

Change ID	Title	Description
#51269	UDMG Client CLI	The `udmg-client` binary ships with UDMG Server and provides a command-line interface for managing UDMG resources (Accounts, Credentials, Endpoints, Pipelines, and more) through the UDMG REST API. UDMG Client CLI can run from any machine with network access to UDMG Server (a workstation, a CI/CD runner, a jump host), authenticates as a UDMG User, and does not require access to the UDMG Server host or Configuration File. This enables repeatable, scriptable management operations without requiring a browser or custom API scripts, making it well suited for embedding in CI/CD pipelines and runbooks. For more details, refer to UDMG Client CLI.
#48629	Containers Support	UDMG is now available as a Docker image, enabling deployment in containerized environments. The image is offered in two variants: RHEL (`redhat/ubi10-minimal`) and Debian (`debian:trixie`). The UDMG Server binary is the same in both. A Helm chart is also provided for Kubernetes deployments. For more details, refer to Docker Containers.

The udmg-client binary ships with UDMG Server and provides a command-line interface for managing UDMG resources (Accounts, Credentials, Endpoints, Pipelines, and more) through the UDMG REST API.

UDMG Client CLI can run from any machine with network access to UDMG Server (a workstation, a CI/CD runner, a jump host), authenticates as a UDMG User, and does not require access to the UDMG Server host or Configuration File.

This enables repeatable, scriptable management operations without requiring a browser or custom API scripts, making it well suited for embedding in CI/CD pipelines and runbooks.

For more details, refer to UDMG Client CLI.

#48629

Containers Support

UDMG is now available as a Docker image, enabling deployment in containerized environments. The image is offered in two variants: RHEL (redhat/ubi10-minimal) and Debian (debian:trixie). The UDMG Server binary is the same in both. A Helm chart is also provided for Kubernetes deployments.

For more details, refer to Docker Containers.

User Management & Access Control

Change ID Title Description

#47828

Transfer Quotas

Change ID	Title	Description
#47828	Transfer Quotas	Administrators can now set per-Account byte transfer limits to prevent any single partner from monopolizing shared server resources, or to enforce contractual bandwidth allocations. Quotas are configured in the UDMG Admin UI on the Account, with a Direction (uploads, downloads, or both) and a Reset Period (daily, weekly, monthly, quarterly, or yearly). When a quota is reached, UDMG blocks or aborts the transfer and returns a protocol-appropriate error to the client. Current usage is visible in the Utilization field on the Account Details page. For more details, refer to Quotas.
#60034	Default Admin Password Reset	The default System Administrator (`udmg.sys-admin`) is now required to change its password before accessing the UDMG Admin UI. The default password is publicly known, and the enforced reset eliminates the risk of leaving it unchanged. For more details, refer to Default Admin Password Reset. warning This requirement applies to fresh installations only. When upgrading from UDMG 3.3.x, no forced reset is enforced; however, if the `udmg.sys-admin` password has never been changed, changing it is strongly recommended.
#57031	Auth Lock Visibility and Clearing	Administrators can now check whether a User or Account is auth-locked by inspecting the `authLocked` field in the User or Account GET response. When `true`, the entity has an active authentication block due to exceeding the User Lockout Policy or Account Lockout Policy failed login attempt limit. To clear the lock before the lockout period expires, Administrators can call the `auth-unlock` REST API endpoint for the User or Account. For more details, refer to Checking and Clearing a User Auth Lock and Checking and Clearing an Account Auth Lock.

Administrators can now set per-Account byte transfer limits to prevent any single partner from monopolizing shared server resources, or to enforce contractual bandwidth allocations.

Quotas are configured in the UDMG Admin UI on the Account, with a Direction (uploads, downloads, or both) and a Reset Period (daily, weekly, monthly, quarterly, or yearly).

When a quota is reached, UDMG blocks or aborts the transfer and returns a protocol-appropriate error to the client. Current usage is visible in the Utilization field on the Account Details page.

For more details, refer to Quotas.

#60034

Default Admin Password Reset

The default System Administrator (udmg.sys-admin) is now required to change its password before accessing the UDMG Admin UI. The default password is publicly known, and the enforced reset eliminates the risk of leaving it unchanged.

For more details, refer to Default Admin Password Reset.

warning

This requirement applies to fresh installations only. When upgrading from UDMG 3.3.x, no forced reset is enforced; however, if the udmg.sys-admin password has never been changed, changing it is strongly recommended.

#57031

Auth Lock Visibility and Clearing

Administrators can now check whether a User or Account is auth-locked by inspecting the authLocked field in the User or Account GET response. When true, the entity has an active authentication block due to exceeding the User Lockout Policy or Account Lockout Policy failed login attempt limit.

To clear the lock before the lockout period expires, Administrators can call the auth-unlock REST API endpoint for the User or Account.

For more details, refer to Checking and Clearing a User Auth Lock and Checking and Clearing an Account Auth Lock.

Administration

Change ID	Title	Description
#49184	Version History	UDMG now tracks the full change history of most Configuration Items (Accounts, Account Groups, Endpoints, Pipelines, Tasks, and Credentials), as well as Business Services. Each version records who made the change, when it was made, and a complete snapshot of the configuration at that point in time. Administrators can access Version History from any versioned item's detail page via the Versions button, which opens a reverse-chronological list of prior versions. Selecting a version opens a color-coded diff comparing that version to the current configuration, making it easier to identify what changed and when. Useful for both troubleshooting and compliance reviews. For more details, refer to Version History.
#48025	UDMG Status	UDMG 3.4.0 introduces the UDMG Status page, providing a real-time view of the health of every UDMG resource across all Domains and Cluster Nodes. Each resource Record shows its current status, any detected symptom, and when it was last checked. Resources are grouped into categories: Certificates, Cluster, Database, Endpoints, Forward Proxy, Hook Server, ICAP, LDAP, License, and SSO. This makes it possible to spot degraded or failing resources at a glance without checking each one individually. For more details, refer to UDMG Status.
#55811	Scan for Host Key	When configuring a Remote SFTP Server Endpoint, Administrators can now retrieve the partner's SSH host key directly from the remote server without requiring manual key exchange or external tools. With the Scan for Host Key feature, UDMG performs the SSH handshake and returns the available host keys for review. Confirming a key creates a new Public Key Credential and assigns it to the Endpoint automatically. For more details, refer to Scan for Host Key.

Change ID

Title

Description

#49184

Version History

UDMG now tracks the full change history of most Configuration Items (Accounts, Account Groups, Endpoints, Pipelines, Tasks, and Credentials), as well as Business Services. Each version records who made the change, when it was made, and a complete snapshot of the configuration at that point in time.

Administrators can access Version History from any versioned item's detail page via the Versions button, which opens a reverse-chronological list of prior versions. Selecting a version opens a color-coded diff comparing that version to the current configuration, making it easier to identify what changed and when. Useful for both troubleshooting and compliance reviews.

For more details, refer to Version History.

#48025

UDMG Status

UDMG 3.4.0 introduces the UDMG Status page, providing a real-time view of the health of every UDMG resource across all Domains and Cluster Nodes. Each resource Record shows its current status, any detected symptom, and when it was last checked.

Resources are grouped into categories: Certificates, Cluster, Database, Endpoints, Forward Proxy, Hook Server, ICAP, LDAP, License, and SSO. This makes it possible to spot degraded or failing resources at a glance without checking each one individually.

For more details, refer to UDMG Status.

#55811

Scan for Host Key

When configuring a Remote SFTP Server Endpoint, Administrators can now retrieve the partner's SSH host key directly from the remote server without requiring manual key exchange or external tools.

With the Scan for Host Key feature, UDMG performs the SSH handshake and returns the available host keys for review. Confirming a key creates a new Public Key Credential and assigns it to the Endpoint automatically.

For more details, refer to Scan for Host Key.

USP

Change ID	Title	Description
#55897	PostgreSQL Database Support	USP Manager now supports PostgreSQL as an external database engine for storing configuration data, runtime state, configuration versioning, and encrypted secrets. PostgreSQL joins Oracle Database and Microsoft SQL Server as a supported option for production and high-availability deployments. The embedded SQLite database remains available for evaluation and development environments only. For more details, refer to Database Installation.
#57418	Containers Support	USP is now available as a set of Docker images, enabling deployment in containerized environments. Each component is provided in a separate image: `usp-manager`, `usp-server`, and `usp-client`. All images are offered in RHEL (`redhat/ubi10-minimal`) and Debian (`debian:trixie`) variants. For more details, refer to Docker Containers.
#49969	Secure ICAP (ICAPS)	USP now supports ICAPS (ICAP over TLS), encrypting communications between USP and the ICAP scanner. This is useful when company policy requires that internal scanning traffic be protected in transit. ICAPS is enabled by selecting a CA Certificate in the CA Certificate for ICAPS field on the ICAP Scanner. For more details, refer to ICAP Scanners.
#57181	Forward Proxy Listener	USP now includes a Forward Proxy Listener type, allowing USP to act as an HTTPS CONNECT forward proxy for UDMG outbound connections. When UDMG sends an HTTP(S) CONNECT request, USP establishes a passthrough tunnel to the destination UDMG specifies (such as an external partner server) without terminating or inspecting the tunneled protocol. This allows organizations to route UDMG outbound traffic through USP instead of relying on separate proxy infrastructure. On the UDMG side, configure a Forward Proxy with Type HTTP or HTTPS pointing to the USP Server, then enable Use Forward Proxy on the relevant Remote SFTP Server or Remote FTP(S) Server Endpoints. For more details, refer to Forward Proxy Listeners and Forward Proxy.

UDMG​

Protocols​

Security​

Automation & Workflow​

User Management & Access Control​

Administration​

USP​

UDMG

Protocols

Security

Automation & Workflow

User Management & Access Control

Administration

USP