|
|
Kensington & Chelsea Primary Care TrustDriven by a move towards home working via broadband, Kensington and Chelsea PCT were aware that the new N3 contract for NHSNet would eventually provide some remote connectivity but due to the stated timescales (late 2005) Kensington and Chelsea needed a solution in place more quickly that was both cost-effective and accepted by the NHSIA. Data Integration was aware that a number of NHS and Primary Care Trusts had a similar requirement and had approached the NHSIA directly to discuss a solution using SSLVPN access. Having demonstrated the benefits and the security of this technology, the NHSIA approved the use of SSL VPNs for remote access from non-NHS owned PCs and this standard was detailed in syop doc version 7.7. Our solution incorporated additional security controls such as intrusion prevention, firwalling the existing NHSNet connection, two-factor authentication and final penetration testing carried out by a CHECK accredited consultant. The solution includes a Juniper NetScreen Secure Access appliance capable of supporting 100 concurrent users but scalable up to 1000 users. Kensington and Chelsea wanted to use the solution to roll out applications to a wide variety of users within the PCT. SSL VPNs are ideal for this secario because they provide access at the application level so full logging and granular access can be provided to individual users and individual applications. Comprehensive host checking of the remote user ensures that both the type of client device and the level of installed desktop security software complies with the PCT's security policy. Back to Customers |






