CommunityZero® Security
CommunityZero® from Ramius® offers you enterprise class security and data protection so you can be confident about exchanging sensitive information online.
With CommunityZero, your communities are always secure and your data is always protected.
Network Connectivity and Physical Security
CommunityZero hosted sites are located within two separate carrier-class data centers with 24x7x365 monitoring:
- Highly secure physical infrastructure owned and operated by Q9 Networks
- Biometric access control and digitally archived video surveillance
- Engineered to eliminate any single point of failure in network and power
- Multiple layers of redundancy in power systems, HVAC, fire detection and suppression
- Service level agreement (SLA) guaranteeing 100% network and power uptime capability
Network Hardware and Application Servers
Network hardware and application servers are continuously monitored for capacity, performance and health providing you worry-free operation. A pure Java application, the CommunityZero hardware environment is built upon:
- Sun Microsystems servers
- Cisco switches
- Network Appliance filers
- F5 Networks load balancers
- SSL accelerators and more
- Application server operating systems include Sun Solaris or Red Had Enterprise Linux
Persistent Storage and Backup
CommunityZero offers you sophisticated data-management functionality in addition to unbeatable reliability and performance:
- Application metadata is stored in an enterprise-grade database server (Oracle)
- User-uploaded binary files are stored on a Network Appliance filer
- Daily, real time backups to a secure off-site date center
- Redundant standby systems in the event of an unrecoverable hardware or software failure
- Continuous monitoring of all hardware and software systems
- Automated paging of on-call Ramius engineers
Application Integrity
Three administrative access tiers ensure the security of your CommunityZero site while providing the ability to delegate some administrative functions:
- Global Administration Level — Accessible by Ramius personnel only, this area is located at the server level and is used to define and configure the unique sites or domains handled by a single instance of the software
- Site Administration Level — Accessible by the client to manage site configuration, users and communities
- Community Administration Level — A local administration area for configuring individual communities (one CommunityZero site can host an unlimited number of communities)
Learn more about CommunityZero's administrative features.
Top of pageUser and Community Permissions
Unique permissions allow you to control community access and content exposure without impacting performance or scalability:
- Mandatory member profile creation
- Unique user name and password requirements
- User names and passwords are stored at the server level in an undecryptable format
- Modify password policies to support your organizations security policies
- Control individual or group access to content (tools, folder, items) and communities
Create communities with one of four major security settings:
- Open — Automatically allow users to join a community
- Restricted — Allow existing community members to invite new users to join/participate in a community
- Private — A community administrator/founder must approve access before a new user can join a community
- Hidden — Configure your community as “hidden” as well as private. A unique invitation key is generated to allow authenticated users access to this community. Unauthenticated visitors and non-members have no way of accessing this community (they may not even know it exists).
Additional Security Options
Support your organization’s security policies through these service upgrade options:
- Secure sockets layer (SSL) Security — Protect data exchange between end users and your CommunityZero site using full, 128-bit encryption. This encryption protects all data including user passwords, instant messages and community data.
- IP-based Security — Restrict access to your communities and enhance security by blocking or allowing IP addresses or IP address ranges; or allow only the IP range of your local network
- Single Sign-On (SSO) Integration — Integrate your CommunityZero site with an existing user-authentication system. A secure XML-based and HTTP token API ensures a safe exchange of data between CommunityZero and your servers.