Fortigate firewalls & layers of security

Before users can access any data stored with AccountTECH, they must pass through a robust initial security layer.

IP location restriction: Access is restricted to users connecting from IP addresses located in North America, ensuring geographic control.

Two-factor authentication (2FA): Users validate their login credentials using a secondary authentication method, adding a vital layer of protection against unauthorized access.

This process is hosted and managed by Cloudflare, which protects darwin.Cloud from malicious attacks, ensures secure connections, and provides a seamless user experience.

Once authenticated, every user’s connection is routed through a direct, one-to-one connection with our API servers hosted on AWS. AWS provides industry-leading scalability, speed, and reliability, ensuring that all user requests are handled efficiently.

The redundant API servers that we host at AWS are configured so that they can only be accessed by validated users logged into and using darwin.Cloud. There is no way to access the AccountTECH API servers except thru darwin.Cloud. These API servers act as a bridge between the user and our SQL servers, maintaining tight control over how data is accessed or sent.

When a darwin.Cloud API server sends or receives data from our SQL servers, it uses a private Optical Cross-Connect (OCX) between AWS and our on-premise SQL servers at CoreSite.

Ultra-fast speeds: Ensuring real-time responsiveness for all data transactions.

Maximum security: Data bypasses the public internet entirely, protecting it from interception or unauthorized access.

Reliable performance: Consistent, predictable data flow for critical business operations.

At the final step, all data requests—whether they’re retrieving or updating information in SQL—must pass through our Fortigate firewalls.

A Fortigate firewall is a next-generation firewall (NGFW) developed by Fortinet, renowned for its industry-leading security capabilities.

Fortigate firewalls inspect traffic deeply, provide intrusion prevention systems (IPS) and application control, and continuously adapt to evolving cyber threats using AI and machine learning.