Alteryx server RC4 encryption

[adrianloong]

Wondering if there are any plans to change the RC4 encryption on alteryx server to something stronger (eg: AES, Blowfish etc)

Would be curious to see if anyone else in financial services has this challenge from a security perspective.

Adrian

[MattB]

Hi @adrianloong,

Thanks for submitting this. We have plans to move beyond RC4 to something even more secure. We are making sure to look at our architecture holistically as security is a top priority.

[adrianloong]

Thanks @MattB, i'm grateful that alteryx is looking to improve all aspects of the platform.

[S_nzen]

Hi, 

We too are in the financial services industry and have faced challenges with implementing Alteryx server. Objections included strong opposition to RC4. 

While we have successfully implemented the service, additional compensating controls are always required to maintain our compliances. 

[PeterA]

FYI  - Encryption between the components that make up the Alteryx Service has been upgraded to use AES-256 bit encryption. 

Users connecting directly to a controller to create schedules in Designer will need to have an upgraded version of Designer.

See more at https://help.alteryx.com/ReleaseNotes/Server/Server_2018.4.htm

[KylieF]

Updating this idea's status back to Under Review, to be in line with past product updates.

[KylieF]

Thank you for your post! This idea is being updated to the Revisit status as we like this idea and it's something we'd like to keep in mind for future updates, but cannot put on the roadmap at this time. We'll update the status however once we have a better idea on if and when it could be included in the roadmap.