Security Basics mailing list archives

Re: Need for Encryption?


From: sparkzz <sparkzz () gmail com>
Date: Thu, 21 Feb 2008 18:03:18 +0100

Hi there,

if it's confidential, i suppose it's best to trasnfer encrypted..
But how you could do that through a fax i wouldn't have a clue.
About the scanned files, vpn between your main and remote offices
should take care of things imho.
Ofcourse, if you would have a vpn set-up between remote and main
offices, you wouldn't need the fax anymore i guess(?) and have it all
secure.

please correct me if i'm missing something here.

grtz,
brabo.

On 14 Feb 2008 19:30:59 -0000,  <nfanelli () nchsn org> wrote:
I have several clients faxing confidential information (Payroll & Direct Deposit info, etc) from a remote office to 
our corporate fax server.  The fax server is running GFI's Faxmaker and routes the incoming fax to an Exchange 
mailbox.



 My question is, does the transmission or storage of the documents need to be encrypted (is it mandatory)?



 Also, I have another group of users that are using multi-function printers to scan the same type of documents listed 
above and emailing them to an address on my Exchange server.  The MFPs have SSL/TLS capabilities but they are not 
enabled.  The account the MFP is using to send email is on our Exchange server and is authenticating via IMAP.  Our 
remote sites are NOT directly connected to the corporate via an IPSEC tunnel.



 Again, does the transmission or storage of these documents need to be encrypted (is it mandatory)?



 If you answered yes to either questions, how could I go about accomplishing that? I am aware the eFax has a service 
to encrypt faxed documents and that may be a solution, but is there another way?  And i'm not sure where to begin 
with the scan to email issue.



 The company is privately owned higher learning institution and  while i'm a bit new to all the compliance 
regulations that are out there,  I would appreciate some direction on where to begin.



 Thanks in advance!





-- 
Microsoft isn't evil, they just make really crappy operating systems.
-- Linus Torvalds


Current thread: