I want to create a secure tunnel between two sites. They both have internet access and fixed IP addresses. What hardware and configuration do I need?
What you are referring to is a VPN. Typically a VPN consists of a minimum of 2 pieces of hardware, configured to accept each other's incoming traffic and (un)encrypt that traffic.
If you do NOT already have a firewall on both ends now is the time to get them! A good firewall will provide adequate, secure VPN services as well as NAT/PAT/etc.
There are so many brands and feature sets I won't recommend a particular one. However, the first things you need to do are:
- Become familiar with what a VPN does exactly (look at Cisco's site for a really good primer)
- Decide what you want to do with the VPN. If you are looking at just accessing e-mail or simple file transfers that's great. But if you want to get into running applications (such as accessing an Access MDB) over the VPN I think you will be quite disappointed. This is, of course, all dependent on your connection speed.
- Research some hardware by looking at both Professional and User reviews (but remember to take them with a grain of salt)(Check out CNET.COM for hardware reviews). Be sure to pay particular attention to the type of encryptions it is capable of using. If you can, get 3DES encryption as it is the current industry standard and is relatively quick so it won't impact performance.
- Determine your budget for both ends, and don't forget to include installation costs if necessary for the other end from where you are (if you can't get there easily)
Also, if you have dedicated Internet connections (such as Frame Relay or other type of T-1) you can call your ISP and ask if they sell a firewall/VPN package that works with your current connection.
I just got through setting up a new VPN for my business so I could work from home, and with a T-1 circuit it's pretty slow. So we use a Remote Control package on dedicated PC's to do most of the work. This way only screen shots, keyboard and mouse controls are being passed. Not only is it blazing fast, but the remote control software adds an additional layer of encryption to the data being passed. Nothing like encrypting your data 5 separate times for security!