Local Filesystem

A Local Filesystem is a type of Endpoint that represents a file storage location on the local system that serves as either a Source Endpoint or Destination Endpoint in Pipeline configurations.

UDMG uses this Endpoint to bridge the abstract server Endpoint configurations and the physical filesystem structure. It provides granular control over where files are stored. By separating the storage configuration from other Endpoint components, the system enables consistent file handling across multiple Pipelines while maintaining centralized control over storage parameters.

Before You Begin

Root File Path

The Root File Path is the Endpoint's base directory on the UDMG host. Its effective location is determined by the security.domain_chroot argument. For details, see Folder Management.

The Root File Path essentially serves as the foundational directory from which all Pipelines' Relative Paths are calculated during file operations that use this Endpoint.

In other words, this is the base folder where the system "lands" for file operations, and if nothing more specific is given, this is where the file is stored. The server file system is shared across all Domains, so setting the correct Root File Path for each Endpoint is critical.

For the Local Filesystem Endpoint, the Root File Path establishes the storage hierarchy for all transferred files and provides the critical reference point for enforcing permissions across the file system structure. Proper Root File Path configuration is essential for optimal performance and correct file system segregation.

Key aspects:

• Ensure the specified location has adequate storage capacity.
• The path should be on a reliable and performant storage system.
• There is no upfront validation of the path (format or existence).
• If the path doesn't exist, the system attempts to create the directory at runtime, and runtime errors will occur if the directory creation or access fails.

Stage Files in a Temporary Folder

The Stage Files in a Temporary Folder toggle determines whether inbound files are staged in a temporary location before they reach their final destination. The selected mode also enables or disables certain features, as shown in the table below.

This setting only applies when the Endpoint is used as a Destination Endpoint. When used as a Source Endpoint in outbound (push) Pipelines, this setting has no effect on transfer behavior. Transfer resume is always active for push Pipelines. On each retry, UDMG automatically checks the remote destination for a partial file and resumes from where it left off.

Staging applies to inbound transfers only. Files read from this Endpoint are served directly from their final location and are not staged.

Stage Files in a Temporary Folder	File Handling	Temporary Path	Transfer Resume	On Staged Tasks	ICAP Scanning
Enabled (staging mode)	Staged in Temporary Path, then moved to final destination (uploads only)	Required (uploads only)	Not supported	Supported	Supported (uploads only)
Disabled (streaming mode)	Written directly to final destination	Not used	Supported	Not supported	Not supported

When streaming mode is selected, the Temporary Path and ICAP Scanning - Inbound fields are disabled in the form. Their values are preserved but not editable. When staging is re-enabled, the fields become editable again and retain any previously entered values.

info

For the full list of Pipeline types that support transfer resume, see UDMG as Server and UDMG as Client.

Temporary Path

The Temporary Path designates the staging area where files are temporarily stored during the transfer process before being moved to their final destination within the Root File Path structure.

The Temporary Path serves as an essential intermediate storage location. It provides a secure holding area during in-progress file transfers, prevents incomplete or corrupted files from appearing in the destination directory, and enables proper validation, scanning, and processing before final delivery.

This field only applies when the Endpoint is used as a Destination Endpoint and Stage Files in a Temporary Folder is enabled. When used as a Source Endpoint, this field has no effect.

UDMG resolves the Temporary Path according to the security.domain_chroot argument. For more context on this, see Folder Management.

Important Things To Note

• For best performance, the Temporary Path should be on the same filesystem as the Root File Path.
• Avoid using the same path or a subdirectory of the Root File Path.
• Depending on your Scan Results Handling configuration, files detected as infected—or files that fail scanning—may remain in the Temporary Path directory. See also Storage Monitoring.
• UDMG does not validate the path up front; at runtime, it attempts to create the directory if it does not exist. Operations fail if the directory cannot be created or accessed (for example, due to permissions).
• Temporary files are written with a unique name in the format <UUID>-<original-filename>, which adds 37 characters to the original filename. Ensure the resulting name stays within your filesystem's maximum filename length (commonly 255 characters).

ICAP Scanning - Inbound

The Internet Content Adaptation Protocol (ICAP) scanning feature provides security scanning for all inbound file transfers, operating exclusively at the receiving end. When enabled on a Local Filesystem Endpoint, incoming files are automatically routed through the configured ICAP server for threat detection before the transfer is finalized. This process helps prevent malware from propagating through your file transfer infrastructure.

ICAP Scanning - Inbound is only available when Stage Files in a Temporary Folder is enabled. When staging is disabled, the field is disabled in the form and has no effect on transfers.

info

For more information, refer to ICAP.

Adding an Endpoint

To add an Endpoint, follow these steps:

1. From the Sidebar, select Configuration > Endpoints.
2. Click the Add Endpoint button.
3. Select the Local Filesystem as the Endpoint Type.
4. Complete the Name and Description details for the new Endpoint.
5. Enter the Root File Path.
6. Choose the Stage Files in a Temporary Folder setting.
   • If enabled, enter the Temporary Path.
7. Choose whether to enable ICAP scanning and allow every inbound file transfer to be scanned (at the receiving end).
8. Choose whether the Endpoint should be enabled effective immediately.
   • Note: The Endpoint must be added to a Pipeline for the Endpoint to be serviceable.
9. Click Add.

Field Descriptions

The following table describes the fields that are configured for the Endpoint:

Name	Description	Specifications	Required
Endpoint Type	The type of Endpoint indicates the type of file transfer. Select: Local Filesystem.	Cannot be modified after creation.	Yes
Name	The name of the Endpoint.	Must be unique. Must follow the Standard Naming Pattern.	Yes
Description	The description of the Endpoint.		No
Business Service	Assigning a Business Service to this Endpoint restricts updating, deleting, and other actions so only Users with the same Business Service can perform them (role permissions still apply). For details, see Business Services.	Only Users with the System Administrator, Domain Administrator, or Pipeline Management role can assign Business Services to Endpoints. Select an existing Business Service. To select it, your User must have that Business Service already assigned.	No
Root File Path	Endpoint's base directory on the UDMG host. For more information, see Root File Path. danger Modifying this path after initial setup impacts the associated Pipelines. For more context, see Folder Management.	Can start with / (e.g., /data). Must be unique across all Endpoints and Domains.	Yes
Temporary Path	Directory where inbound files are staged before they are moved to their final destination and the transfer is completed. The Temporary Path should be different from the Root File Path. For more information, see Temporary Path. danger Modifying this path after initial setup impacts associated Pipelines. For more context, see Folder Management.	Can start with / (e.g., /temp).	Yes, if Stage Files in a Temporary Folder is enabled.
Stage Files in a Temporary Folder	When enabled, files are staged in the Temporary Path before they are moved to the final destination. For more information, see Stage Files in a Temporary Folder.	Default value: Disabled.	Yes
ICAP Scanning - Inbound	When enabled, every inbound file transfer is scanned (at the receiving end). To check the status of the ICAP Server, see the UDMG Status page. For more information, see ICAP Scanning - Inbound.	Default value: Disabled. Requires Stage Files in a Temporary Folder to be enabled. When staging is disabled, this field is disabled.	No
Enable Endpoint	When enabled, the Endpoint is active and can participate in file transfers. For more information, see Enabling and Disabling an Endpoint.	Default value: Enabled.	No

Editing an Endpoint

Configuration changes are pushed to all referenced Configuration Items after saving, but the changes are not active until the Account disconnects/reconnects to its client.

To edit an Endpoint, follow these steps:

1. From the Sidebar, select Configuration > Endpoints.
2. Click the Name field of the Endpoint you want to edit.
3. Click the Edit button above the Endpoint details.
4. Edit details for the Endpoint, using the Field Descriptions table as a guide.
5. Click Update.

danger

The Root File Path and Temporary Path are editable, but modifying the paths after initial setup can cause harmful disruptions.

Managing an Endpoint

Viewing Endpoint Details

To view the details of an Endpoint, follow these steps:

1. From the Sidebar, select Configuration > Endpoints.
2. Click the Name of the Endpoint you want to view.
3. Additionally, click the Pipelines tab to see all the Pipelines the Endpoint is associated with.

Endpoint Metadata

Endpoint details include all parameters given in the Field Descriptions table above, plus the following read-only metadata:

Name	Description
UUID	The universally unique identifier of this Endpoint.
Version	Version number of the configuration. Every change increases the number.
Enabled	Endpoint's Enabled status. Displays Enabled when active, or Disabled when inactive.
Created	Date and time this Endpoint was created.
Updated	Date and time this Endpoint was last updated.
Root File Path Free and Total	The free and total space available for the Root File Path in GB. If the path has not been created (after the first file transfer is processed), then the availability is displayed as -.
Temporary File Path Free and Total	The free and total space available for the Temporary Path in GB. Displays - if the path has not been created yet, or if Stage Files in a Temporary Folder is disabled (streaming mode).
Test Status	Status of the "Validate" Endpoint configuration test. Options: Test not executed Test error Test passed

Validating the Configuration

The Endpoint configuration can be validated to confirm whether the Local Filesystem's directory exists. The test does not confirm whether the directory is usable or accessible. After clicking the Validate button, one of the following messages appears:

• Pass: 'Endpoint has passed the test.'
  • If validation passes, then the file path exists.
• Error/Fail: 'Endpoint test has failed. The stat [Root Path]: no such file or directory.'
  • If validation fails and a file has not been transferred, the path is potentially available. The failed status can result from several factors, such as the path not yet existing (since paths are created during the first successful transfer) or insufficient file system permissions.
  • Validate the permissions under the OS.

Storage Monitoring

Real-time storage monitoring for the Endpoint's file paths is provided to help you proactively manage storage resources and prevent transfer failures due to space limitations. On the Details page, you can view comprehensive disk space metrics for both file paths:

• Root File Path: free and total space (GB)
• Temporary Path: free and total space (GB)

Enabling and Disabling an Endpoint

Local Filesystem Endpoints can be Enabled or Disabled to control their active status and ability to participate in file transfers.

• Enabled (default): The Endpoint is active and can participate in file transfers.
• Disabled: The Endpoint is inactive and cannot participate in file transfers.

The status is set during initial creation and can be changed by following these steps:

1. From the Sidebar, select Configuration > Endpoints.
2. Click the Name of the Endpoint you want to enable or disable.
3. Click Edit.
4. Move the Enable Endpoint toggle.
5. Click Update.

info

Changes to the Endpoint's Enabled status do not apply to currently logged-in Accounts or Scheduled Transfers already in progress. The change takes effect on the next Account connection (UDMG as Server Pipelines) or the next Scheduled Transfer (UDMG as Client Pipelines).

Enabling and Disabling ICAP

ICAP Scanning is only functional when Stage Files in a Temporary Folder is enabled on the Endpoint. When staging is disabled, the ICAP Scanning - Inbound toggle is disabled in the Edit form and has no effect on transfers.

Local Filesystem Endpoints allow ICAP Scanning on every inbound file transfer (at the receiving end). The feature is set during initial creation and then can be updated as needed.

• Enabled/True: Every inbound file transfer is scanned. The ICAP Server must be set up and active for the scanning to commence.
• Disabled/False: Inbound file transfers are not scanned.

To enable or disable ICAP Scanning on an Endpoint, follow these steps:

1. From the Sidebar, select Configuration > Endpoints.
2. Click the Name of the Endpoint you want to enable/disable.
3. Click Edit.
4. If the Endpoint's ICAP Scanning - Inbound field is currently enabled/true, you can disable the feature by moving the toggle to the left.
5. Click Update.

Deleting an Endpoint

To delete an Endpoint, follow these steps:

1. From the Sidebar, select Configuration > Endpoints.
2. Click the Name of the Endpoint you want to delete.
3. Click the Delete button above the Endpoint details.
4. You will be asked to confirm the deletion. Click Continue.

warning

UDMG prevents the deletion of a Configuration Item if it is currently referenced by another Configuration Item (i.e., Pipeline). The Configuration Item must be edited or the reference removed before you can delete the Endpoint. Deletion cannot be undone.