Data and Network Security

Properly securing infrastructure, applications, and data on public and private clouds is one of the most often heard concerns about cloud computing. To benefit from cloud computing and minimize risks to your organization several key components are required: visibility across infrastructure and applications, isolation of critical services, and automated processes for threat detection and mitigation. RightScale and our partners have been assisting organizations to secure their cloud-based infrastructure and applications since 2006.

Authentication and Access Management: Securely authenticate users across public and private clouds using RightScale accounts, role based access controls, and single sign on. RightScale provides visibility across public and private clouds, enabling a single means to audit and verify security compliance. Our audit histories enable a comprehensive view of activity across your infrastructure. Centrify Suite and Centrify Express automate the installation and configuration of authentication and access control on cloud systems to join Active Directory and enforce Active Directory-based user authentication and privilege policies.

Key and Credential Management: With Managed SSH, RightScale maintains user-specific SSH keys so you do not have to expose your instance SSH key. Server and application credentials are stored with industry standard encryption and key management practices. Automatically audit SSH keys on your servers using Infrastructure Audit Reports. TrendMicro SecureCloud provides policy-based key management, server identity and security validation, and hosted or on-premise centralized key management.

Network Security: The RightScale Dashboard and API support firewalls across all clouds, whether configured as Security Groups or based on Iptables. Automatically audit open ports on your servers using Infrastructure Audit Reports. Set alerts based on security thresholds, such as number of users logged in or network traffic characteristics. Mitigate with easy security patching and firewall management. CloudPassage Halo provides policy-based server configuration, software, and firewall management that can automatically detect and remediate threats. Riverbed Stingray Traffic Manager is a Web Application Firewall for deep application security, helping to achieve PCI DSS compliance and to protect against a wide range of known and “zero-day” attacks and data leaks.

Virtual Network Topologies: Advanced network setups are supported in RightScale, including AWS Virtual Private Clouds and VPNs in your private cloud. Read about implementing Advanced Networking Security with RightScale.

Get started with the RightScale Free Edition today.