343
edits
Changes
From All n One's bxp software Wixi
no edit summary
=Physical Infrastructure=
bxp software is hosted from the AWS data facility hosted within Ireland (eu-west-1). This Data center and the off-site disaster recovery site for bxp are ISO27001 Certified. (https://d1.awsstatic.com/certifications/iso_27001_global_certification.pdf)
=Secure Design=
==Security==
The high available firewalls are implemented using AWS' network firewalls. This is a managed service with AWS. The Network Firewall includes features that provide protections from common network threats. AWS Network Firewall’s stateful firewall can incorporate context from traffic flows, like tracking connections and protocol identification, to enforce policies such as preventing bxp's metwork from accessing domains using an unauthorized protocol. AWS Network Firewall’s intrusion prevention system (IPS) provides active traffic flow inspection so bxp can identify and block vulnerability exploits using signature-based detection. AWS Network Firewall also offers web filtering that can stop traffic to known bad URLs and monitor fully qualified domain names.
Live 24/7 monitoring from our AWS support team, with alerts and calls to bxp team if required.
An ISMS for our servers is monitored by Datadog HQ (https://www.datadoghq.com/product/)
==Database==
The web servers are implemented using Windows Server on a virtualised basis.
