Requires Free Membership to View
SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!
Michael S. Mimoso, Editorial DirectorI've been reviewing this question for a few days now and think the best answer for your question is to provide standard best practices for all applications using a VPN and SSL. The VPN will provide packet protection for encrypting the packet and headers. SSL will further protect the data. The VPN will wrap the data packet and provide point-to-point (user to company) protection, while the SSL will provide end-point to end-point proof of protection.
Your question is rather complex and requires many more questions and answers, but I think the answer above should lead you on the correct path.
For more information on this topic, visit these other SearchSecurity.com resources:
Best Web Links: Infrastructure and Network Security
This was first published in January 2003