Együd Csaba wrote:
Hi,
thank you very much. These are very good ideas, I think. I forgot one thing to mention. We will have very few clients (max. 20) and
all clients will be required to have a fix IP address. Fix IP addresses can
be listed in pg_hba.conf to filter incoming IPs very efficiently. With this
note, do you think we need VPN or other enhancement?

YOU NEED A SECURITY CONSULTANT. If you think you can rely on static ips as a security tool, you are clueless. I'm sorry, but the fact that you mentioned that this database contains medical information really disturbs me.

A static IP insures NOTHING. A vpn will secure the connection and protect it.

--
Until later, Geoffrey

---------------------------(end of broadcast)---------------------------
TIP 5: Have you checked our extensive FAQ?

              http://www.postgresql.org/docs/faq

Reply via email to