Ask the Expert

Most secure method for allowing remote access to source code

My company has recently started using Visual Source Safe, which is proving to be a great asset. Now, we are looking at ways of utilizing its capabilities remotely. I've read up on a few programs such as SourceOffsite, which does straight TCP linking with 128 bit encryption through SSL. My question is whether this is the most secure method for allowing remote access to source code. It is important to note that I am in the midst of setting up my first ISA server and through my readings know that I will be able to set up VPN access as well as do server publishing. What I'm looking for is the absolute most secure method for allowing my developers to access a VSS server remotely and what potential risks/threats we would be exposing our network to regardless of the most secure solution. I know this is a lot, but if you could shed any light on the topic or point me in a good direction, that would be great.

    Requires Free Membership to View

I've been reviewing this question for a few days now and think the best answer for your question is to provide standard best practices for all applications using a VPN and SSL. The VPN will provide packet protection for encrypting the packet and headers. SSL will further protect the data. The VPN will wrap the data packet and provide point-to-point (user to company) protection, while the SSL will provide end-point to end-point proof of protection.

Your question is rather complex and requires many more questions and answers, but I think the answer above should lead you on the correct path.


For more information on this topic, visit these other SearchSecurity.com resources:
Best Web Links: Infrastructure and Network Security


This was first published in January 2003

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: