Workflowlogo
Search

Security Documentation

Cloud Security Services

Nobus cloud provides comprehensive cloud security services designed to protect your data, applications, and infrastructure from evolving cyber threats.

With a focus on protecting sensitive information and ensuring compliance with industry standards, our solutions are tailored to meet the unique needs of your organization. We leverage state-of-the-art technologies and best practices to ensure a secure environment for your business operations.

Shared Responsibility Model

Provider (Nobus)

Security OF the Cloud

Our key responsibilities include protecting physical data centers and network systems, implementing encryption for data at rest and in transit, and managing access using multi-factor authentication (MFA) and role-based access control (RBAC).

  • • IDS/IPS deployment
  • • Incident response planning
  • • Regulatory compliance (GDPR, ISO 27001, PCI DSS)
  • • Standard SLA security measures
Customer (You)

Security IN the Cloud

Cloud users have several important responsibilities, including protecting data by encrypting sensitive information before uploading, managing access through strong password policies, and securely configuring cloud resources.

  • • Data Encryption & Management
  • • MFA enforcement for users
  • • Monitoring suspicious activity
  • • Compliance within the environment

Key Features

1. Data Protection

In Transit: Data transmitted between your systems and our platform is secured with TLS (Transport Layer Security).

2. Access Control
  • Identity Management: Robust policies to manage user identities.
  • MFA: Enhanced security with two-step verification.
3. Threat Detection
  • IDS: Continuous monitoring of network traffic for threats.
  • SIEM: Real-time analysis of security data.
4. Compliance & Governance
  • Regulatory: Adherence to standards like GDPR, PCI-DSS, and ISO 27001.
  • Policy Management: Customizable governance policies.
5. Network Security
  • Cloud Firewalls: Protect against unauthorized access and DDoS.
  • VPN Solutions: Secure remote access to sensitive data.
6. Incident Response
  • Plans: Tailored strategies to address breaches.
  • Backup: Solutions ensuring business continuity.

Regular Security Audits: We perform periodic security assessments to identify vulnerabilities and ensure compliance with industry standards.

Database Authorization and Authentication for Nobus Managed Databases

Nobus Managed Database Service supports two ways to authenticate database users to ensure your data remains secure and accessible only to authorized personnel.

On this page

Password and IAM database authentication use different methods of authenticating to the database.

IAM Database Authorization and Authentication

You can authenticate to your DB instance using Nobus Identity and Access Management (IAM). With this method, you can use IAM to manage database access for your users.

  • Example: To use IAM authentication, assign the DatabaseFullAccess or DatabaseReadOnlyAccess CodeName to the user.

Important

We strongly recommend that you do not use the master user directly in your applications. Instead, adhere to the best practice of using a database user created with the minimal privileges required for your application.

Password Authentication

With password authentication, your database performs all administration of user accounts. You create users with SQL statements such as CREATE USER.

CREATE USER 'user_name' IDENTIFIED BY 'your_password';

Database authentication might be easier to administer using password authentication when you have small user communities. Integrating a vault with your application can enhance security by automatically rotating passwords.

Password Management for Nobus Managed Databases

Learn how Nobus manages administrative passwords for your database clusters and how to access your credentials directly from the management dashboard.

On this page

Overview

Nobus Managed Database Service simplifies credential management by generating and storing administrative passwords for your clusters during creation. Nobus provides a centralized, easy-to-access method to retrieve your connection details.

Note

Nobus currently manages passwords at the account level. Security is maintained through encrypted dashboard access and internal hardware-level isolation.

Viewing Database Credentials

You can view the master username, hostname, and password for any running database cluster at any time.

1
Access the Dashboard

Log in to the Nobus Management Dashboard using your account credentials.

2
Select your Database

Navigate to the Database Services section and click on the specific cluster you wish to manage.

3
Reveal Credentials

Under the Actions or Details tab, locate the credentials section. Click the Show icon to reveal your password.

Security Best Practices

Application Security

Never hard-code passwords in your source code. Use environment variables in your deployment settings to store credentials securely.

Account Protection

Since credentials are visible via the dashboard, Multi-Factor Authentication (MFA) is enabled on your primary Nobus account.

Data protection in Nobus Managed Database Service

Shared Responsibility Model

The Nobus shared responsibility model applies to data protection in Nobus Managed Database Service. Nobus is responsible for protecting the global infrastructure that runs all of the Nobus Cloud. You are responsible for maintaining control over your content hosted on this infrastructure, including security configuration and management tasks.

Security Recommendations

Multi-factor Authentication

Use MFA with each account to prevent unauthorized access.

Secure Communication

Use SSL/TLS 1.2 or 1.3 to communicate with Nobus resources.

Activity Logging

Utilize Nobus Activity Logger for API and user activity logging.

Important:We strongly recommend that you never put confidential or sensitive information, such as your customers' email addresses, into tags or free-form text fields such as a Name field. Any data entered into these fields may be used for billing or audit logs.

Protecting data using encryption

At Nobus, security is a top priority. You can enable encryption for your database resources to protect data at rest, and you can also encrypt active connections to your DB instances to secure data in transit.

Standard Security Compliance

Nobus encryption leverages industry-standard AES-256 algorithms. Always ensure your applications are configured to require SSL connections for maximum data integrity.

Encrypting Nobus Managed Database Service resources

Nobus Managed Database Service can encrypt your database instances at rest. Data encrypted includes the underlying storage, logs, automated backups, read replicas, and snapshots.

Uses industry-standard AES-256 encryption algorithm.

Transparent decryption with minimal impact on performance.

Note: Data in transit between source and read replicas is automatically encrypted, even across availability zones.

Verifying Encryption Status

Nobus Dashboard
  1. Sign in to the Nobus Cloud Dashboard.
  2. Navigate to Databases and select your server name.
  3. Under the Details tab, locate the Storage section.
  4. The Encryption field will display either Enabled or Not enabled.

Limitations

1

Encryption must be enabled at creation time.

2

You cannot turn off encryption on an existing db server.

3

Unencrypted backups cannot be restored to an encrypted instance.

Internetwork traffic privacy

Nobus ensures that your data remains private and protected as it moves across networks. Connections are secured both between Nobus MDS and your on-premises applications, as well as between MDS and other Nobus Cloud resources within the same region (e,g West Africa WA or East Africa EA).

Private Connectivity Options

To establish a secure bridge between your private network and the Nobus Cloud, you have two primary options:

Site-to-Site VPN

Create an encrypted tunnel between your data center and your Nobus Virtual Private Cloud (VPC).

View VPN Guide

Nobus FastTransit

Establish a dedicated, high-speed physical network connection bypassing the public internet.

View FastTransit Guide

Encryption Requirements

All network-based API operations for Nobus MDS require modern cryptographic standards to ensure traffic privacy.

  • Transport Layer Security (TLS)

    We require TLS 1.2 at minimum and strongly recommend upgrading to TLS 1.3.

  • Perfect Forward Secrecy (PFS)

    Clients must support cipher suites like DHE or ECDHE to ensure session keys aren't compromised.

Traffic flowing between Availability Zones (AZs) is automatically encrypted at the physical layer before leaving Nobus secured facilities.

Advanced Cybersecurity Services

We offer robust cybersecurity solutions to protect your business from a variety of threats. Offerings include FortiGate Firewall, Sophos XG Firewall, and Acronis Cyber Protect. Each solution is designed to enhance your security posture, ensuring your data and applications are safe from cyber threats. We also provide comprehensive support to assist you whenever needed.

Sophos XG Firewall

Sophos XG Firewall brings a fresh new approach to the way you manage your firewall, respond to threats, and monitor what’s happening on your network.

It provides all the latest advanced technology you need to protect your network from ransomware and advanced threats including top- rated IPS, Advanced Threat Protection, Cloud Sandboxing and full AI-powered threat analysis, Dual AV, Web and App Control, Email Protection and a full-featured Web GUI.

Some key features include:

  • Synchronized Security: Automatically responds to threats based on real-time data from endpoints.
  • Advanced Threat Protection: Detects and mitigates sophisticated threats using machine learning and artificial intelligence.
  • Central Management: Unified management console for monitoring and managing network security.
  • User Awareness: Provides insights and reports on user activity to enhance security policies.
SET UP

If the following minimum server requirements are not met, XG Firewall will go into failsafe mode:

  • Two vCPU
  • 4 GB vRAM
  • 2 vNIC. ( warning! the Network maximum transmission unit (MTU) for Nobus is 1458 )
  • DiskI with code name Security-Sophos-XG-Firewall-DiskI: Minimum 30 GB
  • DiskII with code name Security-Sophos-XG-Firewall-DiskII: Minimum 80 GB

For optimal XG Firewall performance, configure vCPU and vRAM according to the license you have purchased. Do not exceed the maximum number of vCPUs specified in the license.

STEPS

Create Two Root Volumes (Primary and Auxiliary)

The boot source of the two volumes are; (a) Security-Sophos-XG-Firewall-DiskI: Minimum 30 GB and (b) Security-Sophos-XG-Firewall-DiskII: Minimum 80 GB images respectively.

To create these volumes, log in to the Nobus Management Console.

Goto Project > Volumes > Volumes

Click on the “ + Create Volume” button. On the new Create Volume window, provide the neccessary inputs as specified below.

  1. Volume Name
  2. Description (optional): primary volume
  3. Volume Source: Select Image
  4. Use image as a source: Choose Security-Sophos-XG-Firewall-DiskI
  5. Size: minimum 30 GB
  6. No need to specify other inputs
  7. Click on the Create Volume button below to create the volume

Repeat the steps above to create the auxiliary volume but this time;

  1. Use image as a source: Choose Security-Sophos-XG-Firewall-DiskII
  2. Size: minimum 80 GB
  3. No need to specify other inputs
  4. Click on the Create Volume button below to create the volume

After the two root volumes had finished creating, you can then proceed to creating your sophos xg firewall instance with the next step.

Contact cloud support if you need assistance.

Acronis Cyber Protect

Protect your mission critical Systems from Servers to desktops/Laptops with Nobus Cloud Backup (NCB). With NCS, Our cloud customers can now provide an extra layer of backup & Cyber security for their applications at a fractional monthly cost. On-Premise customers, and customers hosting their applications with other 3rd party cloud providers such as AWS, Azure, GCP or VMWare-Based hypervisors can now backup and protect their applications and critical user data on Nobus platform

Some key features include:

1.Advanced Backup & Recovery for various workloads (Cloud & On-premise, Nobus cloud or 3rd party cloud)

2. Ransomeware Protection for all systems

3. Forensic Backup

4. Vulnerability scan across your system

5. Antivirus Protection

6. Single view for management of all Protected workloads

7. NDPS cuts your Cyber protection costs by up to 50%, boosts your monthly recurring revenue, while delivering best in className Cyber protection for your applications and data.

To protect business-critical data, backup is not enough – customers need the integrated approach of cyber protection. Paired with Nobus Cloud Backup, the Advanced Backup pack enables our customers to extend the cloud backup capabilities required to proactively protect their data. Available in consumption-based or per-workload licensing models, you can easily minimize data loss across your infrastructure and workloads with the best-in-breed backup and recovery technology that is enhanced with cyber protection. See the Customer support documentation or download the User guide and Admin guide.

To get started with creating your Acronis Cyber Protect Instance, Select acronis-cyberprotect from image list during instance creation

Note:

Min Disk(GB) is 100 and Min RAM(MB) is 8192

Contact cloud support if you need assistance.

FortiGate Next-Generation Firewalls (NGFWs)

FortiGate Firewall network security solution provides comprehensive security features designed to protect networks from various threats.

Some key features

  • Next-Generation Firewall (NGFW):
    Combines traditional firewall capabilities with advanced features like intrusion prevention, application control, and deep packet inspection.
  • Unified Threat Management (UTM):
    Integrates multiple security functions into a single device, including antivirus, web filtering, and VPN support.
  • High Performance:
    Designed to handle high volumes of traffic with low latency.
  • Secure SD-WAN:
    Provides secure software-defined wide area network capabilities.
  • Centralized Management:
    Enables centralized control of multiple FortiGate devices.
  • Cloud Integration:
    Secures cloud environments and integrates with cloud services.
  • Threat Intelligence:
    Utilizes FortiGuard Labs for real-time threat intelligence.

Use Cases

  • Enterprise Security:
    Protecting corporate networks from cyber threats.
  • Remote Access:
    Providing secure VPN connections for remote workers.
  • Compliance:
    Helping organizations meet regulatory requirements.
  • Branch Office Security:
    Extending security to remote offices.

FortiGate Firewalls are versatile, high-performance security appliances used by organizations of all sizes to safeguard their networks against a wide range of threats while simplifying management and improving operational efficiency.

To get started with creating your FortiGate Firewall Instance, Select Security-Fortigate-FortiOS list of supported images during instance creation.

Contact our cloud support team to get started with setting up your database cluster.