Series Overview for Securing Oracle Analytics Cloud Resources using Zero Trust Packet Routing

The Oracle Analytics platform comprises OAC (Oracle Analytics Cloud) and OAS (Oracle Analytics Server). It supports the efforts of every analytics user role. AI and ML are embedded throughout the platform to accelerate productivity and power better business decisions. Features include:

• Data visualization and storytelling
• Machine learning
• Mobile analytics
• Open data source connectivity
• Data preparation and enrichment
• Enterprise data modeling

This series provides best practices, architectural diagrams, and links to documentation for successfully deploying ZPR (Zero Trust Packet Routing) to secure Oracle Analytics resources such as OAS (Oracle Analytics Server) and OAC (Oracle Analytics Cloud), and the ADW (Autonomous Data Warehouse) resources they connect to.

Included in the series are the following posts:

• Prepare Zero Trust Packet Routing Components for Securing Oracle Analytics Services
• Secure Oracle Analytics Cloud using Zero Trust Packet Routing
• Secure Oracle Analytics Server using Zero Trust Packet Routing

Following the guidance in this series requires:

• An existing OCI tenancy.
• Privileges to manage resources in the compartments secured with ZPR.
• Privileges to manage ZPR policies in the tenancy.

The OCI Zero Trust Packet Routing documentation provides an excellent introduction and a short video.

ZPR helps to prevent unauthorized access to data by decoupling network security policies from the underlying network architecture. Using an easily understood and intent-based policy language, functional security administrators can define specific access pathways for data that build upon the foundation of network firewalls, route tables, and security lists managed by network administrators.

ZPR policies require the network administration components but take precedence over them. For example, security lists and route tables in a VCN (Virtual Cloud Network) may allow all resources in a subnet to connect to the resources in another subnet. ZPR policies can restrict access to only the resources explicitly assigned to ZPR security attributes referenced in a ZPR policy.
 

This diagram depicts ZPR requiring and building upon an existing network security framework.

This diagram depicts an existing network security framework allowing network traffic from users through two gateways.

This diagram depicts ZPR taking precedence over an existing network security framework and allowing network traffic from users through only one gateway.