Ask the Expert

Best practices for processing financial data through remote servers

We use two methods for connecting two remote servers through the Internet: either an IPsec VPN or by opening the port of the remote server. The two servers are mainly used for financial transactions. What are the risks involved with using each method, and which do you recommend?

    Requires Free Membership to View

First, I'm assuming that there are both network and client firewalls between the servers on both ends of the connection. If this is not the case, definitely revisit the network topology to determine if this type of basic Internet shielding can be implemented. In the case you describe, the firewall protecting the server should be configured to allow traffic only on that single required port from the single IP address of the remote server.

Next, consider the confidentiality controls in place. How are the two servers connecting to each other? Are they using SSL or another secure, encrypted protocol? If the servers are using a secure protocol, a VPN connection may add unnecessary overhead to the communication, as each message would be encrypted and decrypted twice. In that case, skip the VPN. On the other hand, if you're not confident in the security of the encryption used by the client/server protocol, an IPsec VPN configured to use strong encryption is a safe, reliable choice.

More information:

This was first published in June 2008

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: