General VPN Question

[TiziteLayinLow]

OK im very new to VPNs so bare with me guys.

I might be in the process of updating a local pharmacy network within the next year. It would be a Win server 2003, and 3 xp pro workstations. domain based network, road runner business class and ubr904 cisco router.

the server runs pharmacy server software to send insurance claims and holds prescription data and does backups. the workstations have client software to send/recieve data from the server.

i have a cisco 831 router at home with road runner regular.

the pharmacy own has linksys router with road runner regular.

Could I setup a VPN at my house location and his house location so that I could get into the network for monitor preformance and he could use the pharmacy client software at home for whatever he needs to do at home? (assuming the software lets him).. basically the network wouldnt know its a VPN connection vrs. plugged into the LAN locally?

thanks for the help in adva

 

[Boscoh]

Considering the sensitivity of the information you'll be dealing with, I'd recommend you get a professional to do this.

No offense, but if you're dealing with health insurance claims and medical records, you'll likely encounter HIPAA. Even if you dont, that's some very sensitive information you're dealing with and it sounds like you have no idea how big the can of worms is that you're about to open. If this is how it sounds, this isn't something that should be taken lightly.

Just my opinion.

 

[TiziteLayinLow]

well im a cisco academy student.. familar with network security just never messed with VPN. Seeing as how secure IPSec is and the pharmacy software is encrypted as well.. which can also be tunneled threw SSH for RSA authorization.

maybe your right.. ill grab some more info.. like i said it wont begin for another 8-9 mos anyways.

thanks for your post,

 

[Zuke]

For a small network like you're describing, I'd consider using IPCop. IPCop is a linux firewall distribution. It runs on a cheap old computer, is a dedicated firewall box and does VPN. Basically, you put a IPCop box at the office, one at home and they connect to each other to complete the VPN. Pretty easy, secure, and cost-effective. I run IPCop at our church which also has a school and it works great.

www.ipcop.org