Security Configuration Considerations on the FICO Analytic Cloud

Xpress Insight operates in a secure configuration when deployed on the FICO Analytic Cloud. This secure configuration enforces a number of restrictions:

• Solver algorithms are limited to 4 threads.
• Module parameters can only be set in the model itself.
• mmjobs: routines connect and detach are disabled.
• mmhttp: routine startsrv is disabled.
• mmhttp: outgoing requests to IP addresses and domains in the FICO Analytic Cloud are disabled.
• mmodbc: connection strings must be of the form DSN=<dsn> or use the integrated 'sqlite' driver.
• mosjvm: Java classes will execute under a security manager to prevent access to files outside the Mosel work directory, starting sub-processes, accessing databases or network resources; For more, see the section Use in Mosel Restricted Mode of the Mosel to Java Module reference manual.

Note These restrictions are in addition to the default rules:

• NoExec (no system calls or interaction with external native code)
• NoReadNoWriteWDOnly (file system access restricted to the current working directory only)