Skip to main content
Documentation

Routing Connections Through the On-Premise Agent

The Files.com Agent connects your Files.com site to internal servers without VPNs, VPC peering, firewall openings, or network redesign. Use it when Files.com needs to reach private infrastructure that cannot be exposed to the public internet.

Traditional approaches to this problem rely on VPNs, VPC peering, private endpoints, or inbound firewall rules. These work, but they add operational complexity, long-term maintenance, and additional attack surface. Agent-routed connections remove those requirements. The Agent makes outbound connections only, so no inbound firewall ports are opened and no private networking constructs need to be managed.

How It Works

When Agent routing is enabled, the Files.com platform never connects directly to the internal server. Files.com connects to the Agent, and the Agent opens the connection session to the internal server. The internal server does not need a public IP address and does not accept inbound connections from the internet.

Users and Automations interact with the Remote Server the same way they do with any other integration. File transfers, directory listings, and metadata operations behave identically.

Supported Connection Types

These connection types can be routed through the Agent:

To enable every supported routing type at once, edit the Agent configuration file and set integrations to "all".

Setting integrations to "all" expands the scope of what the Agent host can access. In most environments, we recommend specifying only the integrations required for your workflows, following the principle of least privilege.

After changing the configuration, restart the Agent so it advertises the updated routing support to your Files.com site. Until the Agent restarts, it continues running with the previous configuration and the new routing options are not available.

Eliminating Inbound Connections from the Internet

Agent-routed connections keep the internal server fully private. The server does not listen on the public internet and is not exposed to scanning, brute-force attempts, or protocol-level attacks. All outbound connections originate from the Agent host, which you control inside your environment.

You retain full control over which internal systems the Agent can access. Authentication, encryption, and access controls remain unchanged, and Files.com never requires inbound access to your private network.