Remote access

[bocosoft]

Does anyone have any experience with setting up remote connections to a server behind Cisco 1700 series router?

A client of mine needs to set it up.
The data itself is very sensitive. His clients should only have acces to one folder on WIN server and to one application running on the server. It should be 99,999% safe.

Any suggestions, before I stard digging through Google for mostly useless information?

[generic]

It should be 99,999% safe.

only suggestion, forget about 99.999% safe

[Brangwyn]

What protocols you be using ? RDP, FTP, HTTP?

The routers probably a no brainer just open the required ports with an IP restriction to limit who can come in on those ports (being only your client)

[mresell]

Yeah, you got service type, ip, user, mac address etc... for restriction. May want to consider SSL, VPN etc...Really depends on what the purpose will be. Mainly have available only what is necessary, if possible.

[keidsjedo]

It sounds like your next step is determining what kind of security you need. This would be things like who needs to access the folder and app... traveling users? a remote office with static IP? From there you can figure out what your access-list will look like. For example will you be allowing access based on user-name/password (i.e. traveling users) or also by IP (remote office with static IP).

Cisco's documentation can be pretty good with the scenarios. Dig through the example configs and you may find something that matches your needs.

[bocosoft]

We can limit access for IP's and maybe even for MAC addresses.
I was thinking VPN is the way to go, but here is why thay need it:
They are an acconting company. Thay do accounting for 100's of companies and thay want to give them 24/7 access to their data. On the server there will be an application they can use to see their info.
They know nothing is 100% safe, but thay want to get it as close as possible. If someone was to gain access to that data it would be owfull. So what we were asked to do is this:
1. prevent anyone else to access the server
2. prevent allowed users to access data of other users

I am allready going through Cisco docs, but I though someone with similar experience could give me a few pointers (they need it setup ASAP and I cannot afford going through tons of information at this stage).