Discussion Locked

VPN vs FTP

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am trying to decided if I should setup a VPN or FTP server for our hospital server. Our inhouse server is going to need to be accessed by our transcriptionst for dictation, one of our software providers accesses the server now by dialup to make changes in his software, and we are looking at going to digital xray where the radiologist will need to access images stored on the server. I am trying to decide if I should setup a VPN or FTP server for this access to the server. Which has the most security - what about implementation - I need some expert advise. We have T1 connectivity.

3 replies

by oldefar

Before you move into production on the dictation and more importantly the digital archive and retrieval for radiology, you need to consider your bandwidth requirements.

Begin with a simple conversion of bytes to bits on the files that will be moved. Multiply by 8 for this (files sizes are in bytes). If both are expected to move over a T1, divide by 1.536 Mbps to see how much "wire" time will be needed per file.

Now, your transfers will have some additional issues. First is the packet size. This will determine how much overhead will be needed. Add 32 bytes per packet, with a packet count equal to the bits of data divided by your packet size in bits. Next is latency - for every two packets add one round trip ping time plus 60 bytes of wire time. Other issue include encryption - this can cause a change in your packet size.

All of this will give you a realistic approximation of how long the transfer will take IF it is the only traffic on your network. If you know your current traffic load, you can reduce your effective bandwidth by that load to approximate your transfer time.

by jim-h

I think setting up a VPN for simple file access might be more work than it is worth. VPN setups are great when you have a list of things that you want to remote users to access but if it is just used to download a couple files here and there then I think you have other affected, easier, options.

Some other methods to consider could be the following:
==================================================
Web Server Encryption: You can setup a web server that encrypts all sessions to protect data from being easily accessed or eavesdropped. You can compare this to what banks use for online transactions and such. You can also utilize firewall or web server techniques, only allowing certain IP addresses, and that is even the better.
http://www.thawte.com/html/RETAIL/ssl/
http://www.apache-ssl.org/
http://www.digicert.com/SSL-Web-Servert.html

SSH Server: SSH is a great way to secure your communication with a Server. It also has a feature similar to FTP, called SFTP, that may provide you with enough adequate protection.
http://www.openssh.com/

File Encryption: You could also look into encrypting the files themselves. This way if the files are intercepted using a non-secure file transfer they are that much harder to do anything.
http://www.fileencryption.org/
==================================================

Hope it helps, Good Luck!
Jim

by hal 9000

All outside contacts so this would mean a VPN for the software company who does regular dialup's to update their software. I suspose thsi is something like Medical Spectrum which has updates every 6 months or so.

As far as the rest goes if it is all inhouse and nothing is leaving the LAN then just a simple encryption program to protect the files and a decent firewall.

This of course changes if different staff have different levels of access to the system. The other two responces seem preety right to me as well but we would honestly need more infomation as to what is exactly required like network type, who has what access to the unit and if it remains all inhouse.

Then there is also the size of files that will be used in the digital X-Ray as this may require an upgrade to Gigabite networking if you don't already have that. It all depends on how much speed is required and it is far too late after the event to start fixing things up so everyone is happy.

I hope that has been of some use to you and if you would like tyo post more details here I'm sure most people here would be only too willing to help.

This discussion is closed to new replies.