OleDB Data Query - Micros 3700

[Moregelen]

This is mainly for pmegan because I know you do it - but if anyone else wants to chime in

I was wondering.. how are you going about establishing your OleDB connection to your RES sites? I ask because I have a customer with 27 stores that I'm considering doing something similar for. The problem is, we had another site that opened the SQL port themselves without even consulting us. It bit them in the ass because they failed a PCI audit when their network was scanned. Apparenlty its a no-no to have that port open?

Do you do some kind of VPN system, or do you just have the port opened (and maybe opened on a different port number)? Do you know if there is anyway to establish SSL on the connection with sybase? Getting certificates is no problem, but I don't really see anywhere to set something like that up.

If you can't do the SSL approach, I suppose at the very least I might just end up writing the scripts in to open an SSH tunnel when it needs the data, but I wanted to hear your thoughts on that first.

Thanks!

 

[pmegan]

My setup is probably a bit different than theirs. Our locations are all part of our WAN and have no direct access to the internet. Everything goes through two sets of firewalls to our corporate servers before getting to or from the Micros servers. Also, my database connections are only coming from two servers behind our firewalls, so that port is only open to those servers.

 

[Moregelen]

Oh wow. You guys actually have your own WAN. Impressive. It seems like no one does that anymore due to VPN being so cheap these days but yeah... Having an honest to god WAN would do it. Nice. You have a well run ship there huh

 

[pmegan]

Yep, MPLS circuits and a DSL backup connection.
I'm lucky enough to work for a company that understands the importance of a solid IT infrastructure. Having that kind of connectivity combined with the control you get with all of the users on the same domain really makes things a lot easier. It also allows me to use windows authentication for almost everything I write, so our managers can go to any of our locations and have the correct access to everything they need. And when someone leaves they're cut off as soon as their active directory profile is disabled. Very handy indeed.

 

[Moregelen]

Now I'm jealous being from an IT company means I understand the need. Being the dealer means none of the people I end up working with do. It's sooooo frustrating. Especially when you have customer that nickel and dime everything.

I have one customer that has 27 stores but they refuse to buy anything except used equipment; they also refuse to buy from authorized resellers because it's more expensive. They use Windstream internet and.. Just... Ugh. They're a nightmare.

So yeah. I'm totally jealous of your infrastructure

 

[pmegan]

I know the feeling. That was one of the most frustrating things when I worked for a dealership. Customers want Mercedes on a racetrack quality at Hundai on a dirt road prices. And then scream at you when the stuff they bought at an auction doesn't live up to their expectations.

 

[Moregelen]

Yup. Toally what I'm deal with right now. And we're breaking our backs to make this customer happy because of how long they've been with us (not that we could possibly be making money on them right now). They are pushing for us to do two upgrades a week, which the sales person of course said OK to. Been so busy lately..

 

[pmegan]

Lol, salespeople can be a challenge sometimes. When I worked for the dealership we had one guy who sealed the deal on a 2700 system for a bar by ensuring that the workstations came in black. The sales manager made it happen...

by sending that salesman home with the workstations and a can of black spray paint.
no lie.