Calyx RIM Architecture

Calyx RIM File Synchronization with VPN

VPN connection provides secure file synchronization.

File Synchronization with VPN.

  • Link between Customer and Calyx will be via a Site-to-Site VPN
  • All communications are HTTPS (port 443).
  • Although files are synced both ways all connections are initiated outbound from the Customer File Sync Server to the Azure File Sync Services. No inbound ports need to be opened in the Customer environment.
  • File share can only be accessed with a SAS Token. This is created when the File Sync server is set up.
  • File share is protected by a storage firewall that is configured to block internet access, therefore disabling access to the storage public endpoint.
  • File Share will only be accessible via a private endpoint and so is only accessible externally via the VPN.
  • All Calyx RIM servers are protected with Anti-Virus/Anti-Malware software.
  • All Calyx servers are monitored by our Security Operations Centre (SOC).
  • All Calyx RIM storage accounts are protected with Microsoft Defender.
  • Files within the Calyx RIM application are modified and updated by Customer publishing end users via the Calyx RIM application, there is no other external access.
  • Approximately 90% of files that are sent back are PDF.
  • Any files that need to be synced with Calyx RIM will need to be copied to a folder on the customer File Sync Server.
  • End users will continue to access Calyx RIM via a URL over the internet, there is no impact on their interaction with Calyx RIM.