network security

D_wathi
D_wathi used Ask the Experts™
on
Dear Experts

We have to setup and IT infrastructure highly secured,  at head office application servers will be hosted and these applications are web-based this will be accessed from the remote branch office, please suggest is mpls hub and spoke OR IP-sec VPN login setup is recommended network and data security is to be highly secured, please suggest OR you may suggest some other option also, thanks in advance
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
if you have hosted applications then you are having security concirns... then create DMZ and put webservers on DMZ ... in this scenario servers behind the lan with certain ports allowed firewall and above that DMZ and again a firewall external ip face...

this scenario you can make the secured hosted application

about the IP SEC or MPLS ... its depending upon you the connectiovity ... which is easy to access, speed and budget so you can decide..

all the best

Author

Commented:
thanks for the reply,  this web based applications are used only from remote site no access to anyone,  we can manage IT security budget but looking for best network design
Santosh SalunkeNetwork Security Lead
Distinguished Expert 2018
Commented:
Software Engineer
Distinguished Expert 2018
Commented:
IPSEC is encrypted, MPLS might (not) be depending on setup.
So IMHO IPSEC LAN/LAN between offices & DC.
If it needs to be highly secured you may need special precautions in the DC to only allow acces to authorized personnel to the cabinets.
(Standard locks are not very good).

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial