Latest Security Enhancements in Data Access & Connectivity

We never stop working to upgrade the security of our products—check out new enhancements to Oracle ODBC, Hybrid Data Pipeline and IBM dashDB.

As we move forward into the new year, we recognize that your security concerns didn’t stop in 2017. Security needs are continuously evolving, and we are constantly improving our products to make sure you stay ahead of them. We recently announced a series of security updates to several key products in our Data Connectivity and Integration suite, and this blog summarizes these upgrades so that you can take advantage of the improvements.

At Progress DataDirect, we are constantly updating our connectors’ security so that our partners can continue to rely on us for their data access security needs. This includes veracode scanning with each delivery to ensure data access is secure and free from malicious code or other backdoor threats. Below we’ll break down the security highlights from our recent releases.

Oracle ODBC Driver

We have upgraded our Oracle ODBC 8.0.2 driver with support for Oracle Wallet, Oracle Internet Directory and New Data Integrity Algorithms (SHA – 256, 384, 512).

Details

• Oracle Wallet: Our driver supports using Oracle Wallet for SSL Authentication and as a keystore or truststore for SSL data encryption
• Oracle Internet Directory (OID): Our latest driver has also been certified to use Oracle Internet Directory, Oracle’s LDAP compliant directory, as a means to store authentication information
• New Data Integrity Algorithms: Our Oracle driver has been enhanced to support new data integrity algorithms SHA256, SHA384, SHA512 along with MD5 and SHA1

Hybrid Data Pipeline

Hybrid Data Pipeline (HDP), our lightweight, embeddable data access service that simplifies integration by connecting directly to data via ODBC, JDBC or OData (REST), has received several key improvements with the upgrade to Hybrid Data Pipeline 4.2.1.

Details

• External Authentication: HDP now supports external authentication protocols such as LDAP, OAuth and other identity and access management products, via a Java plugin
• FIPS and FEDRAMP Enhancements: The HDP server now offers a configuration where it can be run in FIPS 140-2 compliant mode. Also, the HDP account lockout policy will be enabled by default in accordance with Federal Risk and Authorization Management Program (FedRAMP) low- and medium-risk guidelines. Both these enhancements make Hybrid Data Pipeline easier to adopt for US Government entities.

IBM dashDB

Now called IBM Db2 Warehouse on the Cloud, IBM dashDB provides data warehousing and analytics as a service. Progress DataDirect offers high-performing ODBC, JDBC and OData connectors for dashDB.

Details

• ODBC: The ODBC driver is based on the DB2 Wire Protocol. Our driver includes enterprise ready features such as SSL/TLS encryption, connection pooling, and SQL up-leveling
• JDBC: Our driver for JDBC now offers High-Availability, Bulk Load, SSL/TLS encryption, SQL Up Leveling, support for Kerberos and other advanced features
• OData: We also offer OData-based REST API for data access with IBM dashDB. OData is an ISO approved OASIS standard for REST API that can be used from modern programming languages, mobile clients and also applications such as Salesforce, Power BI and Tableau. Learn more about OData.

Keeping Your Data Secure

We’ll continue to work tirelessly throughout 2018 (and beyond) to make accessing your data both easy and secure, no matter where it is being housed. Learn more about our data connectivity solutions and all our recent releases.

As always, we welcome you to contact us if you have any security questions.

Contact Us