Infrastructure protection
Where your information is stored
All information regarding SDS for C&M is stored in secure OVH datacenters in France. OVH deploys an anti-DDoS solution that protects the SDS for C&M infrastructure from denial of service attacks. In addition, all servers and databases that host your data are protected by several levels of Iptables firewalls.
How do the components communicate?
All data flows between the various SDS for C&M components go through the HTTPS protocol and port 443. The TLS version used is v1.2.
| Service | Source | Destination | Description | ||
|---|---|---|---|---|---|
| Authentication with SDS for C&M Encryption Portal | User devices | https://sds.stormshieldcs.eu/portal | URL to access SDS for C&M Encryption Portal - and - Management of Helpdesk and Recovery users |
||
| Stormshield server (SDMC) | User devices | https://sds.stormshieldcs.eu | URL to access the Stormshield server (SDMC) | ||
| SDS for C&M client | User devices | https://sds.stormshieldcs.eu/api/internal | URL to create accounts and to access security policies | ||
| Stormshield API | User devices | https://sds.stormshieldcs.eu/api | URL to access information about users and logs, and to retrieve logs | ||
| Mailjet API | Stormshield server (SDMC) | Mailjet server | Used by SDMC to send e-mails from the address noreply@stormshieldcs.eu |
Vulnerability management
Stormshield‘s Cloud Services and Research & Development teams implement a vulnerability management policy during every publication without disrupting service. Stormshield‘s security officer monitors the results of automatic analyses of sensitive data.