# Oracle native network encryption
<a name="Appendix.Oracle.Options.NetworkEncryption"></a>

Amazon RDS supports Oracle native network encryption (NNE). With the `NATIVE_NETWORK_ENCRYPTION` option, you can encrypt data as it moves to and from a DB instance. Amazon RDS supports NNE for all editions of Oracle Database.

A detailed discussion of Oracle native network encryption is beyond the scope of this guide, but you should understand the strengths and weaknesses of each algorithm and key before you decide on a solution for your deployment. For information about the algorithms and keys that are available through Oracle native network encryption, see [Configuring network data encryption](http://www.oracle.com/webfolder/technetwork/tutorials/obe/db/11g/r2/prod/security/network_encrypt/ntwrkencrypt.htm) in the Oracle documentation. For more information about AWS security, see the [AWS security center](http://aws.amazon.com/security).

**Note**  
You can use Native Network Encryption or Secure Sockets Layer, but not both. For more information, see [Oracle Secure Sockets Layer](Appendix.Oracle.Options.SSL.md). 

**Topics**
+ [NATIVE\_NETWORK\_ENCRYPTION option settings](Oracle.Options.NNE.Options.md)
+ [Adding the NATIVE\_NETWORK\_ENCRYPTION option](Oracle.Options.NNE.Add.md)
+ [Setting NNE values in the sqlnet.ora](Oracle.Options.NNE.Using.md)
+ [Modifying NATIVE\_NETWORK\_ENCRYPTION option settings](Oracle.Options.NNE.ModifySettings.md)
+ [Removing the NATIVE\_NETWORK\_ENCRYPTION option](Oracle.Options.NNE.Remove.md)