Long time reader first time asking.

I have HIPAA data I need to get from point A to point B. Point A can either securely host the file to be pulled by Point B or push the data to Point B. I am primarily interested in the overhead and security impact at Point B.

My understanding is if Point A were to push the file to Point B, best practices would be to have it dumped via SFTP in a secure location in Point B's DMZ and then pulled inside to Point B's secure zone.

If Point B were instead to pull the data from Point A via SFTP is it okay to pull directly into Point B's secure zone or should it make a stop in the DMZ first?

Ultimately I need to figure out if we need to set up an SFTP server at Point B or not.

  • Where are point A and point B located? Is one a vendor or are they both locations you own? I assume that you're getting a file from a vendor but that's not clear. – baldPrussian Jan 30 '18 at 16:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.