Is SSL needed within a private network??

Is SSL needed within a private network??

am 02.08.2007 18:36:02 von Ryan

I have credit card info which i need transfered from my local and vpn clients
to my local server and then out to my merchant gateway.

Question:
Is SSL needed between the local and vpn clients to the local server? And if
so, how do I set that up?

Re: Is SSL needed within a private network??

am 02.08.2007 22:11:07 von Consultant

well, its a matter of policy for your internal network traffic, vpn traffic
is already encrypted. it doesnt hurt too much to have it enabled, just a bit
of overhead on your cpu

"Ryan" wrote in message
news:B8D31830-0775-4250-BF98-253CED726732@microsoft.com...
>I have credit card info which i need transfered from my local and vpn
>clients
> to my local server and then out to my merchant gateway.
>
> Question:
> Is SSL needed between the local and vpn clients to the local server? And
> if
> so, how do I set that up?

Re: Is SSL needed within a private network??

am 02.08.2007 22:46:02 von Ryan

So with that, my understanding is that all I need to worry about is from the
server to the remote merchant gateway. Thanks.

Re: Is SSL needed within a private network??

am 03.08.2007 16:45:17 von .._..

"Ryan" wrote in message
news:466E47DF-6548-467F-B128-973C4242EB1F@microsoft.com...
> So with that, my understanding is that all I need to worry about is from
> the
> server to the remote merchant gateway. Thanks.

Yes. Pretty much.

Though, when it comes to that stuff and getting audited, it might be a good
idea to have SSL anyway.

It would suck to get your merchant account yanked because you wanted to save
a few bucks and a bit of time.

Re: Is SSL needed within a private network??

am 08.08.2007 20:02:34 von Consultant

he can also implement ipsec or isa to direct traffic and enable heuristics

".._.." <.._..@yourmom.mil> wrote in message
news:1cHsi.37319$G23.11008@newsreading01.news.tds.net...
>
> "Ryan" wrote in message
> news:466E47DF-6548-467F-B128-973C4242EB1F@microsoft.com...
>> So with that, my understanding is that all I need to worry about is from
>> the
>> server to the remote merchant gateway. Thanks.
>
> Yes. Pretty much.
>
> Though, when it comes to that stuff and getting audited, it might be a
> good idea to have SSL anyway.
>
> It would suck to get your merchant account yanked because you wanted to
> save a few bucks and a bit of time.
>