Hello all, I am in the development stages of designing webserver with a employee portal for my domain. I would like for the employees to access this portal internally and externally. After logging in they would have access to email and other things. What kind of security design should I go with? It needs to be something very strong, since this site deals with patient information. All input will be appreciated.