Risk assessment for opening internet access for Jira Server and Confluence Server

[John Schultz]

We currently run Jira Server and Confluence Server in our hosting data center. Employees must be on the corporate network to access both.

We are thinking of opening Jira and Confluence to internet access to improve employee experience / access.

I have the Atlassian documentation for security best practices. Wondering if anyone has performed a risk analysis for providing internet access to Jira and Confluence server?

When Atlassian runs their cloud versions they have a big security ecosystem backing them up. We do not necessarily have that level of support.

I am think about things we'd need to provision and test specifically for Jira and Confluence - IDS / IPS, DDoS, WAF...?

Has anyone reviewed from this perspective?

Thanks.

[Sebastian Richards Romero]

Hello, did anyone have an answer for this question?

[Jeramy Spring]

Doesn't look like it. I'm faced with this issue. We have one group who wants to open Confluence up to the internet and take it out of the firewall/remove sign in.