Q

Best practices for processing financial data through remote servers

When connecting to remote servers through the Internet, especially when financial data is at stake, security is paramount. Network security expert Mike Chapple addresses basic precautions to take and makes his recommendation for the most secure implementation.

We use two methods for connecting two remote servers through the Internet: either an IPsec VPN or by opening the port of the remote server. The two servers are mainly used for financial transactions. What are the risks involved with using each method, and which do you recommend?
First, I'm assuming that there are both network and client firewalls between the servers on both ends of the connection. If this is not the case, definitely revisit the network topology to determine if this type of basic Internet shielding can be implemented. In the case you describe, the firewall protecting the server should be configured to allow traffic only on that single required port from the single IP address of the remote server.

Next, consider the confidentiality controls in place. How are the two servers connecting to each other? Are they using SSL or another secure, encrypted protocol? If the servers are using a secure protocol, a VPN connection may add unnecessary overhead to the communication, as each message would be encrypted and decrypted twice. In that case, skip the VPN. On the other hand, if you're not confident in the security of the encryption used...

by the client/server protocol, an IPsec VPN configured to use strong encryption is a safe, reliable choice.

More information:

This was first published in June 2008

Dig deeper on IPsec VPN Security

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchCloudSecurity

SearchNetworking

SearchCIO

SearchConsumerization

SearchEnterpriseDesktop

SearchCloudComputing

ComputerWeekly

Close