Introduction
Managing information system security is a priority for every organization. In fact, the level of security provided by software vendors has become a differentiating factor for IT purchase decisions. Quest strives to meet standards designed to provide its customers with their desired level of security as it relates to privacy, confidentiality, integrity and availability.
This document describes the security features of On Demand Migration. This includes access control, protection of customer data, secure network communication, and cryptographic standards.
About On Demand Migration
On Demand Migration provides the following functionality in a robust project management interface with in-depth monitoring and reporting:
- Analyzes Azure Active Directory structure and highlights the problems that might adversely affect the migration.
- Migrates users, groups, and the related information between Azure AD tenants or maps the existing source/target accounts.
- Migrates hybrid accounts (on-premises users/groups synchronized with Azure AD.)
- Migrates Microsoft Office 365 mailboxes.
- Automatically redirects on-premise Outlook clients to the new Exchange Online.
- Grants access to the source tenant’s resources and applications for the migrated/mapped accounts.
- Transfers OneDrive for Business content and permissions between tenants.
- Ensures uninterrupted workflows during the migration:
- Automatically replaces email addresses in outgoing and incoming messages, as if the senders have already been migrated to the target tenant (Domain Coexistence feature.)
- Shares free/busy information between tenants.
On Demand Migration is hosted in Microsoft Azure and delivers most of its functions via Microsoft Azure cloud services.
Hybrid accounts migration works via the secure connection with Quest Migration Manager for Active Directory, installed on premises.
Architecture overview
The following scheme shows the key components of the On Demand Migration configuration.
QIP - Quest Intellectual Property
Azure datacenter security
Microsoft Azure datacenters have the highest possible physical security and are considered among the most secure and well protected datacenters in the world. They are subject to regular audits and certifications including Service Organization Controls (SOC) 1, SOC 2 and ISO/IEC 27001:2005.
Relevant references with additional information about the Windows Azure datacenter security can be found here:
- Microsoft Azure Trust Center: https://azure.microsoft.com/en-us/overview/trusted-cloud/
- Microsoft Trust Center Compliance: https://www.microsoft.com/en-us/trust-center/compliance/compliance-overview?service=Azure#Icons
- Microsoft’s submission to the Cloud Security Alliance STAR registry: https://cloudsecurityalliance.org/star/registry/microsoft/
- Whitepaper: Standard Response to Request for Information – Security and Privacy: http://www.microsoft.com/en-us/download/details.aspx?id=26647
- Microsoft Global Datacenters: Security & Compliance: https://www.microsoft.com/en-us/cloud-platform/global-datacenters
- Azure data security and encryption best practices: https://docs.microsoft.com/en-us/azure/security/fundamentals/data-encryption-best-practices