Security Considerations

[Jalz]

Guys,

Need some advice. I'm about to look into converting an access school/pupil academic system into a FileMaker based system. One of the things I need to consider is making sure the network infrastructure and computer systems security is adequote to protect data.

Within FileMaker, I can take out the Export script command, so no user can export data from files but what other things can you guys think of that I can do to help keep data on a network secure from prying eyes.

Cheers

Jalz

[mr_vodka]

Hi Jalz,

You may want to read up on the security tech briefs on the FM website as well as Steven Blackwell's security book.

Also have you considered, the FM educational solution as a starter base?

[Jalz]

Hi Mr Vodka,

Thanks for the advice, I haven't won the pitch yet, but have to do a presentation how FileMaker would be secure enough to handle 'personal' data. Is there any benefit of using SSL option (in FileMaker Server) whilst serving the data on the network or am I blowing things out of proportion.....

Will be on the FM website searching for whitepapers at the weekend.

[Steven H. Blackwell]

I have a lot to say about this, but I can't do so right now.

Thanks to Mr Vokda for recommending my book. I try to cover the issues from both a conceptual and a technical standpoint.

Couple of points:

Do enable the SSL option for FIleMaker pro to FileMaker Server connections.

Your presumption about export is not correct.

Steven

[Jalz]

Thanks Steven,

Where do I buy your book from.... I'm sure it will be an interesting read whether I win the pitch or not!

Thought you'd like the idea of SSL between client and server - (not exactly sure what or how it works, but sounds good). Im surprised about your comment on disabling the export in privileges isn't correct' or I assume not required in this instance?

[mr_vodka]

Click on the link in his signature.

http://www.filemakersecurity.com

[Steven H. Blackwell]

Im surprised about your comment on disabling the export in privileges isn't correct' or I assume not required in this instance?

Those privileges are file specific and deal with the UI. It is possible to circumvent those restrictions.

Steven