Technical Overview

AvePoint Perimeter
for Microsoft SharePointOn Point. Out-of-the Box
Make your Microsoft® SharePoint® environment like Dropbox, Google Drive, and Microsoft 365 by enabling two-way
collaboration and external sharing without exiting SharePoint.

External Sharing Features
Controlled Sharing Options
●

●

●

●

●

Share content directly from SharePoint and Microsoft 365
with internal and external users, whether the recipient is
an individual or an AD group, by using an embedded‘secure share’ button.
Users can upload files directly to Perimeter’s “My Drive” toshare with external parties. Perfect for those seeking asecure, on-premises alternative to cloud-based filesharing solutions.
Share recipients can view, edit, delete or download sharedcontent based on prescribed permission rights.
Allow remote or external collaborators to edit or comment on shared content within Microsoft 365 on mobile
devices and desktop browsers, all without exposing
on-premises and online SharePoint to the internet.

as define what permissions a user or group can grant
when externally collaborating.
●

●

●
●

Create rules that enable or disable external sharing basedon document metadata such as file name, file type, andtags for all Perimeter-enabled libraries.
Prevent external users from copying, editing, or sharing
content through the AvePoint Perimeter secure document
viewer with controlled sharing options.
Users can set an expiration date for content they share.
Secure document viewer, accessible from a mobile
application or browser, is fully audited and can enforce
access limitation based on user location.

Create and manage user- and group-based rules torestrict external sharing options for internal users, as well

User/Group-based external sharing control for internal users

Secure External Share Settings
for SharePoint OnlineMobile editing of shared content

My Drive for Internal UsersŃŃ

Domain restriction allows administrators to whitelist specificdomains such as partners or vendors, and blacklist unauthorized domains to prevent data leakage.
Multiple options for sharing files including anonymous access,one-time passcode or requiring registration and sign-in.

Secure Container for Shared Document Access Portal
ŃŃProvide external users a secure, permission-based point ofaccess to view, download, and edit documents shared withthem.

Custom Consolidated Views
ŃŃŃ

Present unorganized SharePoint content in a single,
consolidated view that is specific to end-user needs.
Utilize SharePoint metadata values–created and assigned–todisplay designated content only to external users.

Enable internal users to group disparate files into a virtualfolder for specific external users.

SharePoint Metadata ShareŃ

Protect downloaded or cached documents on iOS devices
with 256-bit AES encryption.

Choose which SharePoint metadata is displayed as part ofthe share.

Custom Consolidated Views

SharePoint Access Management Controls
Multifactor Authentication (MFA): In-Band and Out-of-BandŃ

ŃŃForce or block remote, in-band SharePoint access by theend user’s browser, device, and operating system type.
Add an additional in-band authentication factor byrestricting access to remote SharePoint content throughthe AvePoint Perimeter application.

Multifactor Authentication (MFA): In-Band and Out-of-BandŃ

Authenticate out-of-band users with a single use, limited
time access passcode, or by scanning a QR code with theAvePoint Perimeter application.
Enhance security by configuring two-factor authenticationfor external users.

Location-Based Access Controls

Web Services Access ControlsŃŃŃŃCentralize control for AvePoint Perimeter administrators inorder to define where and how sensitive documents are
viewed or accessed.
Control access based on a user’s geographic location,
allowing corporate content to be viewed in predefinedlocations.
Group multiple locations based on political boundaries ora fixed radius around specific points in order to apply
rules and policies governing user access.

Cached Document Storage on Mobile DevicesŃ

Remotely access file storage from mobile devices to view
documents, online and offline.

Password Policy Management for External UsersŃ

Active Directory Federation Services (ADFS) & FormsBased AuthenticationŃManage and control mobile content on a service-by-service basis by blocking or allowing web services access toMicrosoft® SharePoint® based on user agent.

Manage external user accounts and define password
requirements for external users accessing the external
portal within AvePoint Perimeter Manager.

Add additional access controls and enhance security to
any ADFS-capable application–including Microsoft® Office
365™, Microsoft® Dynamics CRM Online, Microsoft®
Dynamics ERP Online, Microsoft® Project Server Online aswell as the Windows Azure management console–bydeploying AvePoint Perimeter as part of an ADFS installation.

Administrative Features
Detailed Dashboards and Reporting Over Content AccessŃTrack, monitor, report, and audit all remote SharePoint
content access, user activity, enrolled devices, andgeographic locations.

Detailed Dashboards and Reporting Over Content Access

Burglar AlarmŃMonitor, record, and proactively react to users engaging
in suspicious activities with configurable Burglar Alarm
tracking and alerts focused on core Perimeter activities,
including authentication, file sharing, unauthorized
location log-ins, and content downloads.

Share Expiration Policy Management●Enforce mandatory expiration and the maximum durationof a share.

Daily User Audit Tracking●Access an exportable, unified view of the activity acrossdevices of a single user within both Perimeter portals andyour greater SharePoint environment, reporting on all
behaviors during a specified duration.

Permissions Management●

for users, devices, and locations in one central administrator portal with AvePoint Perimeter’s user-friendly wizard.
Enterprise Wipe Capabilities●

Remotely wipe all stored or cached documents and data –as well as all user activity performed within the application– in the event of a breach, loss of device, or employee
turnover.

Bulk Enrollment of Users and Devices●Manage configurations, permissions, and access settings

Enroll multiple users and devices simultaneously byuploading a formatted CSV file.

Supported Technologies
Platforms & Applications●

Supports on-premises and online platforms including● Microsoft SharePoint 2019
● Microsoft SharePoint 2016
● Microsoft SharePoint 2013
● Microsoft SharePoint 2010
● Microsoft Project 2013
● Microsoft Project 2010
● Microsoft SharePoint Online●●OneDrive for BusinessSupports all Active Directory Federation Services (ADFS)
enabled applications including:● Microsoft 365● Microsoft Dynamics CRM Online● Microsoft Dynamics ERP Online

Microsoft Project Server Online● Windows Azure management console.
●●●●●

Remotely access SharePoint® through the following
supported browsers: Internet Explorer® , Edge, Chrome™ ,Firefox®, and Safari.
Remotely access SharePoint® through the following
supported mobile devices: iPad, iPhone, and iPod Touch(iOS 5 and newer versions) .
Remote access to shared documents through mobiledevices on Android™ platform (Gingerbread 2.3 andnewer versions).
Two-factor authentication supported on Windows Phone,iOS, and Android devices. .

How to Buy AvePoint ProductsContact: 201.793.1111 | Sales@AvePoint.com
AvePoint Global Headquarters | 525 Washington Blvd, Suite 1400 | Jersey City, NJ 07310© AvePoint, Inc. All rights reserved. AvePoint and the AvePoint logo are trademarks of AvePoint, Inc. All other marks are trademarks of their respective owners.
Internet Explorer® is a registered trademark of Microsoft Corporation in the United States and other countries.
© 2012 Google Inc. All rights reserved. Chrome™ browser is a trademark of Google Inc.
Apple, the Apple logo, iPhone, iPad and iPod touch are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc.
© 2012 Google Inc. All rights reserved. Android™ platform is a trademark of Google Inc.

Start your free trial today:
www.avepointonlineservices.com
Accessible content available upon request