Encryption options for at rest and in-transit data

siddharths over 6 years ago

The client is planning to use APPIAN cloud installation and wants to use another AWS Cloud MSSQL database as a datasource.

Can you let me know the best practices to follow to ensure connection encryption.

what are the encryption options available and how to enable them on the cloud.

Discussion posts and replies are publicly visible

Parents

+1 Justin Watts
Certified Lead Developer
over 6 years ago

Appian Cloud data is encrypted at rest by default. For in-transit, I would typically recommend a VPN tunnel to the other Cloud system to ensure a secure connection.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Reject Answer

Cancel
0 siddharths over 6 years ago in reply to Justin Watts

Hi Justin, thanks for your reply. I had a couple of questions:

when you say, Appian Cloud data is encrypted at rest by default - what data are you talking about. Is it the data in the Appian engines/kdbs?Looks like the kdb data is stored in a proprietary format but not encrypted.
community.appian.com/.../is-the-kdb-database-encryptyed-at-some-level-we-have-a-security-review-regardin

any idea as to what version of the kdb does APPIAN use? The latest version seems to be kdb 3.6. does appian upgrade to the latest release on cloud immediately?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Justin Watts
Certified Lead Developer
over 6 years ago in reply to siddharths

All of the data for the Cloud instance is encrypted, not just the KDB. You're right that otherwise the KDB is a proprietary format.

As to the version of KDB, I believe they are on 3.3 per the licensing output. However, Appian upgrades the latest version of their software (Appian 18.x) to the latest version on their Cloud platform shortly after release, and scheduling is coordinated with the system owner/customer.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Justin Watts
Certified Lead Developer
over 6 years ago in reply to siddharths

All of the data for the Cloud instance is encrypted, not just the KDB. You're right that otherwise the KDB is a proprietary format.

As to the version of KDB, I believe they are on 3.3 per the licensing output. However, Appian upgrades the latest version of their software (Appian 18.x) to the latest version on their Cloud platform shortly after release, and scheduling is coordinated with the system owner/customer.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 siddharths over 6 years ago in reply to Justin Watts

Are we able to setup a SSL VPN connection? I see the documentation says only IPSec VPN Connection.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 siddharths over 6 years ago in reply to siddharths

The AWS MSSQL server is going to be configured to accept only encrypted connections (SSL/TLS).

Updated Questions:
1. If we setup a IPSec VPN connection between APPIAN CLoud and AWS MSSQL. And AWS MSSQL accepts only encrypted connections (SSL/TLS). Are we still able to connect?

2. If we are not able to connect using IPSec VPN, will setting up a SSL VPN connection help? I see the documentation says only IPSec VPN Connection, can we setup a SSL VPN connection between APPIAN cloud and remote resources.

3. For IPSec VPN connection - is it tunnel or transport encryption ?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel