Data Transfer problem

Hi all,


I need a faster secure way to transfer some data with volume over 1tb.

At the moment all data passed over is 256 bit encrypted, with
appropriate controls of passwords etc. We have to date been using LT
tapes for this, but this is very slow and the recipient have had some
physical problems. Consequently we are looking for a faster method.

The recipient would like to transfer data using a NAS box. This would
need to be attached as a node on the network. What are the security
implications and is there a more secure way of moving this data.

If NAS is the way to go, is there a very secure type?

Regards

Akin

This email and any attachment are intended solely for the addressee, are strictly confidential and may be legally privileged. If you are not the intended recipient any reading, dissemination, copying or any other use or reliance is prohibited. If you have received this email in error please notify the sender immediately by email and then permanently delete the email. Copyright reserved.

All communications, incoming and outgoing, may be recorded and are monitored for legitimate business purposes.

The security and reliability of email transmission cannot be guaranteed. It is the recipient’s responsibility to scan this e-mail and any attachment for the presence of viruses.

The Capita Group plc and its subsidiaries (“Capita”) exclude all liability for any loss or damage whatsoever arising or resulting from the receipt, use or transmission of this email.

Any views or opinions expressed in this email are those of the author only.

2008-06-18 Adewale, Akin (IT Services - Infosec Team) wrote:
I need a faster secure way to transfer some data with volume over 1tb.

At the moment all data passed over is 256 bit encrypted, with
appropriate controls of passwords etc. We have to date been using LT
tapes for this, but this is very slow and the recipient have had some
physical problems. Consequently we are looking for a faster method.

The recipient would like to transfer data using a NAS box. This would
need to be attached as a node on the network. What are the security
implications and is there a more secure way of moving this data.

If NAS is the way to go, is there a very secure type?

Depends. If you write only encrypted data to the media (in case of NAS
you could use an encrypted filesystem for instance) the media type
doesn't matter at all. The encryption algorithm, however, does. Without
knowing the algorithm "256 bit" doesn't say much about the strength of
the encryption.

a more general note:

1. Don't hijack other people's threads. If you want to start a new
topic, write a new mail instead of replying to someone elses.

2. Adding disclaimers to your mail is utterly pointless. They're just a
big waste of bandwidth since they don't have any legal impact at all.

Regards
Ansgar Wiechers
--
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
Coombs on Bugtraq

2008-06-18 Al Rivas wrote:
Have you considered a VPN tunnel between your two locations ?

Transmitting 1 TB over the Internet would take well over 6 hours, even
if both parties were on a T3. I don't think that qualifies as a "faster
way".

Regards
Ansgar Wiechers
--
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
Coombs on Bugtraq

How about shipping external USB drives?

Adewale, Akin (IT Services - Infosec Team) wrote:
Hi all,


I need a faster secure way to transfer some data with volume over 1tb.

At the moment all data passed over is 256 bit encrypted, with
appropriate controls of passwords etc. We have to date been using LT
tapes for this, but this is very slow and the recipient have had some
physical problems. Consequently we are looking for a faster method.

The recipient would like to transfer data using a NAS box. This would
need to be attached as a node on the network. What are the security
implications and is there a more secure way of moving this data.

If NAS is the way to go, is there a very secure type?

Regards

Akin

This email and any attachment are intended solely for the addressee, are strictly confidential and may be legally privileged. If you are not the intended recipient any reading, dissemination, copying or any other use or reliance is prohibited. If you have received this email in error please notify the sender immediately by email and then permanently delete the email. Copyright reserved.

All communications, incoming and outgoing, may be recorded and are monitored for legitimate business purposes.

The security and reliability of email transmission cannot be guaranteed. It is the €™s responsibility to scan this e-mail and any attachment for the presence of viruses.

The Capita Group plc and its subsidiaries (€œC€�) exclude all liability for any loss or damage whatsoever arising or resulting from the receipt, use or transmission of this email.

Any views or opinions expressed in this email are those of the author only.
>

2008-06-18 Al Rivas wrote:
He doesn't mention an elapsed time on his original message. T3
(45Mbps) through a point to point VPN overnight might be faster than
what he's currently using.

Maybe, maybe not. We don't know enough about the P's situation to make
even an educated guess here. Don't forget that the transfer rate is
limited by the slowest connection, i.e. if the remote side doesn't have
a T3 as well or there's a bottleneck somewhere en-route the duration may
be increased significantly. You'd also need connection interrupts into
consideration.

Regards
Ansgar Wiechers
--
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
Coombs on Bugtraq