Jira Server - Security Questions

[Federico M.]

Hi!

We are about to deploy Jira Server in our financial institution (with high security protocols). I have a couple of questions:

1) We want to use the mobile application (which I think is in beta release). Will it be possible to securely use it without having to exposure too much to the internet?

2) We will like to use addons - Do they need internet access or they mostly work within our network once we deploy them in our server?

Thank you very much!

[Ryan]

Federico, 

The answer for each is it depends. Is the server behind a firewall / VPN or do you have it on the perimeter, where a user simply needs to type in your Jira instance URL?

If "yes" to VPN/firewall, your users will need to have a VPN app installed on their phone to be able to access the site. And, depending on the add-on, you may need to whitelist certain IPs to interact with the add-on. It really depends. Apps are generally self-contained and simply exist to provide an internal function like workflow transitions, scripting, etc. If the add-ons are calling out to other services or REST API, you may need to whitelist IPs. The vendor documentation should have it. If you have specific examples, I can try to help point you in the right direction.