Step 9: Connect remote users securely
The ability to connect remote users to a company's network via the
Internet can be a huge boon to business efficiency -- and your bottom
line. But there's a downside: If your employees can tap in, others can
too. That's why security -- including encryption and authentication --
has to be a priority.
Why Your Business is at Risk
Linking remote users and your company's network over the Internet makes
a lot of sense in terms of efficiency. Whether you've got people on the
road, in branch offices or home with sick children, a remote connection
allows them to check e-mail and access shared files without leased lines
and costly long-distance charges. Dial-in users simply connect through any
local ISP.
However, there's a significant security risk any time you make your
network accessible to outsiders.
Basic Steps You Can Take
There are several ways to set up remote connections, but one of the
most secure is using a virtual private network (VPN). With this method,
data is encrypted as it travels over the public Internet, which stops
outsiders from being able to read it. Also, by authenticating users, a VPN
ensures only legitimate users can connect.
You may want to bring in a security consultant if you don't have
in-house IT support, because getting a VPN working properly can be tricky.
However, some server products, including Windows Server 2003, offer
extensive support for VPN technologies. At any rate, there are four basic
tasks involved in setting up a VPN:
| 1. |
Set up a VPN server on your company's network. An existing
computer can be used for this purpose. |
| 2. |
Make sure your firewall is configured to allow VPN traffic. |
| 3. |
Set the remote user's computer to connect through the Internet to
the VPN server. The Connection Wizard in Windows XP makes it easy,
taking you step-by-step through the set-up process. |
| 4. |
Implement strong passwords -- or better yet -- biometric or
token-based authentication to confirm the identity of users connecting
to your network over the Internet. |
