VPN or not to VPN?

[CtlAltDel]

Have a client who has a computer running XP Pro SP2 at both the main office and remote. He'd like his new remote office to be able to access files at the home office, mostly documments and spreadsheets, without having duplicate files on both PCs. Both offices are on cable broadband.

My first thought was to setup an FTP server for them to access the files. Then someone suggested VPN is more secure, but I have no experience setting up a VPN.

Any suggestions for a simple, inexpensive solution would greatly appreciated.

Charlie
"It is always better to have and not need than to need and not have."

 

[VPNSteve]

An FTP server is a pretty insecure way to do anything. The first thing you need to do is check out the hardware between the two sites. Are there any home routers? Nat issues complicate things, but don't make it impossible in most cases.
You can usually (there are exceptions) do port forwarding, but it can get messy. I've always found that firewall and NAT issues are the biggest roadblocks.

A not-so-well-known way to make things much easier is to buy a Contivity 100S (make sure you get the 100S rather than the earier versions) on Ebay. They sell for between 10 and 30 dollars now, and are outstanding VPN endpoints for home users.

 

[CtlAltDel]

Thanks, VPNSteve.

Here is what I know about the hardware.

Site 1 (Main Office)
Comcast Cable Broadband (unknow single port modem)
Linksys BEFSX41 Broadband Router/Firewall/VPN Endpoint (This acts as the DHCP server for the peer to peer network)
Computer with Windows XP Pro (SP2)

Site 2 (Remote Office)
Comcast Cable Broadband (SMC Gateway Router SMC8013WG) This service is supplied to my client by the landlord of the rented suite. (I have very limited access to this gateway.)
Toshiba Laptop running Windows XP Pro (SP2)

Does that help with furthering any ideas. There is already one piece of equipment designated for VPN. I'm fairly confident the landlord won't let me install any more equipment. They were pretty standoff-ish when I was asking questions and trying to explain about setting up a VPN.

Any continued advice is again appreciated.



Charlie
"It is always better to have and not need than to need and not have."

 

[JOAMON]

The landlord may be supplying the connection but you have every right to ask questions as it may put your company at risk if he has not setup security properly on his equipment. Personaly I would put in my own connection and hardware. Is your landlord an internet security expert and willing to put his wallet on the line if he gets hacked and causes loss of revenue to your company???? Most likely...NOT. He either needs to give you access to the equipment so you can have your security expert review it to make sure it is secure otherwise he should not object to you putting in your own connection. Do not know what type of business it is but how do you know that he is not sniffing all the traffic on that connection.

 

[CtlAltDel]

Thanks, Joamon. That is good advice.

I don't feel the landlord is being unreasonable, as much as I know they don't understand any of this technology or lingo. Therefore they are being overly cautious.

The Internet connection is free to the tenants. Provided I have patients enough to explain this all, I believe they would let us open a port in the firewall.

Maybe it would be better to ask for forgiveness than to ask for permission. Just kidding!

Charlie
"It is always better to have and not need than to need and not have."

 

[JOAMON]

When you say tenants do you mean that there are other companies using this same connection? Or are you the only one using the cable connection?

 

[CtlAltDel]

The tenants are given broadband Internet access at no extra charge. Tenants includes the 4 suites in the building.

Charlie
"It is always better to have and not need than to need and not have."

 

[JOAMON]

So....are you comfortable in the fact that other businesses may have access to your computers. Unless the landlord has them seperated on thier own subnets and is blocking access to each other with access control lists or using VLANS on a switch. Either of which I find highly unlikely. I would pursue getting my own internet connection and if you are wanting to do VPN it would be good to get a static IP address.