General Security Question

asked on May 26, 2017

Hello,

We have a customer that wants to purchase an additional license to scan in documents. The only problem here is that they are on a completely different network, yet in the same building. I have suggested to maybe use a VPN for connecting to the LF Server.

My question's are the following:

1. I know I can lock down access to a folder and assign a volume to a different share location, which they want to do, but that share location is on a different network than that of the Laserfiche Server. Once there's a connection to both server's would it just be a matter of creating a share on the separate server for the volume and assigning access rights to the Windows User that LF Server Service is running on?

2. For the client installation, there will need to be a connection to the LF Server (probably via vpn as well), but other than that connection, will there need to be anything else added, meaning when they scan in images, they are temporarily stored somewhere i'm assuming, then get pushed out to the volume.

0 0

replied on May 26, 2017

1. That's all you would need to do. Why do you want to store the volume data on another network? I would worry about latency, and have you thought about how the authentication from LFS to the volume server will work?

2. Temp files are stored on the local machine according to the user's settings. To be clear, when the scanning process is complete the images are not pushed directly to the volume, they are submitted to the Laserfiche server which then stores them on the file server. Your question 1 makes it sound like you think having the volume server be near the user will be beneficial but this is not the case. Users should not have direct access to volume server.

0 0

replied on May 26, 2017

Thanks for the reply.

With regards to #1, the department wants their files separated from the City's server because they are confidential. So that's why that want it on a different server which is on a different network. Ya the authentication process, I think would be just to give the Windows User Account (which is only designated for the laserfiche service) to have access to that share. Will that work?

0 0

replied on May 26, 2017

It will work but if these are separate domains there needs to be a trust relationship set up so that the LFS account is recognized by the file server.

0 0

Question

Question

Replies

Sign in to reply to this post.