Hi Experts,
I come from a Database and Application development background so networks aren't my expertise.
I am considering setting up a server for my company. We are a 'distributed' company. We work from home and the only centralised data we currently have is our emails with our ISP.
What I want:
---------------
I want to set up a server in my home office which has the following apps:
Email (probably Exchange)
Some kind of groupware eg Sharepoint
Some kind of knowledge base/file sharing system
A bunch of demo web apps
The idea is that we can have a private business area for our employees as well as a pubilc client area where we show off demos.
What I have:
---------------
I have broadband at home which passes through a Wireless Netgear router (with non-functioning wireless but that is another story)
I currently have the router at default settings.... block all incoming ports except for the usual filesharing ones.
What I want to know
-------------------------
I don't know enough about security. Is there a way to put some kind of digital certificate on each authorised laptop and thereby restrict access to business functions etc. How does that work?
Can I get some kind of certificate server or something.
At some sites I've used Check Point, is that more secure or something?
Also any info on Service Providers and Linux as alternatives are appreciated.
Thanks for your help.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Thanks very much for that.
How about if I just had a web client for all the apps, and just use the web rather than a VPN? That way I don't have to install any software on the laptops.
I seem to recall that there was a Microsoft VPN driver but I don't know if its the IPSEC one.
Regarding the certificate/key thing. In both cases we have a server which hands out a file which is copied on to the laptop, is that right?
A simpler way will be, put on a user/password authentication mechanism in your web applications, so that only users with the right password can access in. This also does not require the use of certificates.
The certificate server will generate a pair of private key and public key. The client should have a copy of the public key that match with the private key on the server.
Go order a server and have Windows 2003 Small Business installed on it. If you get the premium edition it'll give you IAS as well. You can use you router to block most of the port, leaving open the ones you want. You can use IAS to further enhance the security. You can setup group policy to require IPSEC for all communications on the network, using your SBS server as a cert authority for your own use.
You can easily setup Outlook Web Access for other people to check mail, using SSL if you want.
cd.
Business Accounts
Answer for Membership
by: ppfoongPosted on 2005-07-04 at 23:50:23ID: 14366181
Yes, you can form an IPSec VPN network to interconnect each other, using either certificate or pre-shared secret key.
You will need a firewall with IPSec VPN server feature running at your site, and the remote laptops installed with VPN client such as SoftRemote or CheckPoint SecureClient.
Example of supported firewall is Cyberguard SG series http://www.cyberguard.com/