User Tools

Site Tools


doc:success-stories:electronic-glovebox

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
doc:success-stories:electronic-glovebox [2017/01/16 16:43]
stefanbaur ↷ Page moved from doc:deployment-stories:electronic-glovebox to doc:success-stories:electronic-glovebox
doc:success-stories:electronic-glovebox [2017/03/27 15:26] (current)
stefanbaur Updated to current hardware specs
Line 12: Line 12:
 Where we're diverting from the standard ReCoBS approach is that we're using a single firewall with a third ethernet port for the DMZ, and we're running both the firewall and the X2Go terminal server as virtual machines on a stripped down Debian Linux with KVM. Also, we're providing a web proxy server with a default deny policy, so that you can whitelist "​safe"​ domains like microsoft and antivirus updates, or online banking portals, and access those using your locally installed browser or online banking software (which makes more sense from a security standpoint, if you think about it). Where we're diverting from the standard ReCoBS approach is that we're using a single firewall with a third ethernet port for the DMZ, and we're running both the firewall and the X2Go terminal server as virtual machines on a stripped down Debian Linux with KVM. Also, we're providing a web proxy server with a default deny policy, so that you can whitelist "​safe"​ domains like microsoft and antivirus updates, or online banking portals, and access those using your locally installed browser or online banking software (which makes more sense from a security standpoint, if you think about it).
  
-While the system isn't limited to a particular hardware configuration (we've shipped regular midi-tower cases as well as 19", 1HU rack-mount servers), our standard model is a fanless (i.e. entirely passively cooled), very compact case with enough CPU and RAM for up to concurrent users. A picture, showing the box on top of a stack of copy paper for easy size comparison, is available [[http://​www.baur-itcs.de/​20-servermodelle/​10-lexcomputechtwister|here]].+While the system isn't limited to a particular hardware configuration (we've shipped regular midi-tower cases as well as 19", 1HU rack-mount servers), our standard model is a fanless (i.e. entirely passively cooled), very compact case (taking up less space than a stack of copy paper) ​with enough CPU and RAM for up to 10 concurrent users.
  
 This allows us to offer an affordable solution even for small offices like a general practicioner'​s office. This allows us to offer an affordable solution even for small offices like a general practicioner'​s office.
doc/success-stories/electronic-glovebox.txt · Last modified: 2017/03/27 15:26 by stefanbaur