What type of connection would be the most SECURE???

[SMKungPao]

I have a client (Farmer's Insurance) that needs to implement a fast internet connection to their office. What type of connection should I implement if security is a big issue (people's insurance info will be stored onto these computers)? T1, DSL, Cable, SprintION, Satellite? Thanks.

 

[jmcoreymv]

Security really isnt affected by the layer 2 level or below, other than if they were able to physically get a sniffer somewhere on the connection. Security issues mainly start at layer three, and you may want a firewall, and depending on how important it is, you should get a dedicated firewall such as a Cisco Pix, and use VPN for encryption to communcate with the headoffice, if that is needed. Also, pay for an experienced network professional to set everything up.

 

[purplehayes]

I think that a partial T1 or DSL would be the most secure way to go. I'd couple that with an application-level firewall.

With cable you share a node with your neighbors, and satellite your broadcasting your information.

I'd also like you to consider your liability if you were to set up an insecure Internet connection. Could the insurance company come after you if you were to found to be negligent or you were over-stating your abilities to provide a secure connection. Insurance companies are chock full of lawyers. Just something to consider.

PH

 

[SMKungPao]

Thanks jmcoreymv & purplehayes for the info. I'm going to talk to a few more people before I get back to Farmers insurance about the connection. Purplehayes, thanks for bringing up the liability issue. I never really thought about it...

 

[Entity]

SMKungPao,

Unfortunately, the only truly secure connection is no connection at all. Definitely contact a lawyer before considering taking a job of this nature; if they were to get hacked, you could possibly be liable for quite a bit of damages. If you don't know about layers, firewalls, and security in general, you might not be ready to take on a job of this nature.



Rob

 

[SMKungPao]

Thanks purplehayes and Entity. I've already decided that I'm not going to take the job. (Lack of experience as you mentioned, Entity.) Besides, I wouldn't want a law suit...