Author: Michael Madigan
Posted: 2010-02-26 04:25:13 Link
I need to install a HIPAA compliant secure FTP server on my pc. Does anyone have any suggestions on which server software to use?
_______________________________________________
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/182951.59414.qm@web31408.mail.mud.yahoo.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Author: Dave Crozier
Posted: 2010-02-26 06:38:22 Link
Michael,
I have always used the Serv-U FTP products. They are robust and reasonably
priced as well as easy to set up.
http://www.serv-u.com/hipaa.asp
Dave C
-----Original Message-----
From: profox-bounces@leafe.com [mailto:profox-bounces@leafe.com] On Behalf
Of Michael Madigan
Sent: 26 February 2010 09:25
To: profox@leafe.com
Subject: [NF] I need to install a HIPAA compliant secure FTP server on my pc
I need to install a HIPAA compliant secure FTP server on my pc. Does anyone
have any suggestions on which server software to use?
[excessive quoting removed by server]
_______________________________________________
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/001601cab6d8$33704f70$9a50ee50$@co.uk
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Author: <kamcginnis@gmail.com>
Posted: 2010-02-26 06:54:58 Link
You probably need sFTP and a SSL certificate on your server.
We use apache2triad with the SlimFTPd server. We have been using it for more than 7 years with no significant problems.
I believe there are versions for Linux as well as Windows (We use the windows version). It is nice because you can have
different passwords with different permissions on as many different folders as you want on the same server.
----- Original Message -----
From: "Michael Madigan" <mmadi10699@yahoo.com>
To: <profox@leafe.com>
Sent: Friday, February 26, 2010 1:25 AM
Subject: [NF] I need to install a HIPAA compliant secure FTP server on my pc
I need to install a HIPAA compliant secure FTP server on my pc. Does anyone have any suggestions on which server
software to use?
[excessive quoting removed by server]
_______________________________________________
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/010501cab6da$8675e700$7a00a8c0@w2k3s02
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Author: Malcolm Greene
Posted: 2010-02-26 09:15:21 Link
Michael,
If you can use a 3rd party hosted service, check out Ted Roche's
recommended rsync.net service. They provide hosted storage with every
possible interface including SFTP, SFTP, WebDAV/S, and SCP. Very
reasonably priced - you pay for what you use so for "small" storage
requirements like a few gig, you're only talking about ~$3/month (no
setup fees, no long term commitments).
Rsync.net claims HIPAA compliance. In the past, we used this service to
process 200Gb of pharma salesforce data with HIPAA security requirements
with no problems.
In my opinion, its MUCH better to use a hosted service for these type of
requirements vs. trying to install, configure, maintain/upgrade, and
learn how to use a locally installed application (or set of
applications). I bet you can signup for an Rsync.net HIPAA compatible
SFTP account for less money than a (decent) cup of coffee and faster
than you can download a 3rd party SFTP server.
Rsync.net - highly recommended!!!!
Malcolm
PS: If you're looking for utilities to easily transfer files back and
forth between an SFTP account, Rsync.net has a bunch of free ones that
can simplify your life. We're already big fans of a commercial product
called Webdrive (about $50) and have this product installed on most of
our workstations so this is what we typically use to access our SFTP
accounts. Webdrive allows you to map a drive letter to an SFTP account.
After this mapping has taken place (can optionally happen at startup),
you can access your SFTP account via Explorer and/or via standard
Windows file paths in your applications. Works transparently with your
VFP (and Python!) apps under Windows. We've used Webdrive with great
success with Windows 2000, XP, and Windows 7 (32 and 64 bit). Webdrive -
another highly recommended product.
_______________________________________________
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/1267193721.10556.1362056047@webmail.messagingengine.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Author: Jeff Johnson
Posted: 2010-02-26 09:37:16 Link
I can't help you with the server side but one of my customers required I
use SFTP to transfer data. I use http://winscp.net/eng/index.php. It
works flawlessly with VFP. I created a command script and the customer
supplied a public key and I execute it using the RUN command.
So far not a single failure with hundreds of transfers per month from 22
locations.
Jeff
Jeff Johnson
jeff@san-dc.com
SanDC, Inc.
623-582-0323
Fax 623-869-0675
kamcginnis@gmail.com wrote:
> You probably need sFTP and a SSL certificate on your server.
>
> We use apache2triad with the SlimFTPd server. We have been using it for more than 7 years with no significant problems.
>
> I believe there are versions for Linux as well as Windows (We use the windows version). It is nice because you can have
> different passwords with different permissions on as many different folders as you want on the same server.
>
>
> ----- Original Message -----
> From: "Michael Madigan" <mmadi10699@yahoo.com>
> To: <profox@leafe.com>
> Sent: Friday, February 26, 2010 1:25 AM
> Subject: [NF] I need to install a HIPAA compliant secure FTP server on my pc
>
>
> I need to install a HIPAA compliant secure FTP server on my pc. Does anyone have any suggestions on which server
> software to use?
>
>
>
_______________________________________________
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/4B87DC9C.9090306@san-dc.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Author: Michael Madigan
Posted: 2010-02-26 15:04:59 Link
Thanks Malcolm.
I have been reading a little about HIPAA and think you're probably right on the money. Why risk setting up my secure server incorrectly and risk a possible lawsuit? At least if I set it up at a hosting company I can defer some of the liability to them.
--- On Fri, 2/26/10, Malcolm Greene <profox@bdurham.com> wrote:
> From: Malcolm Greene <profox@bdurham.com>
> Subject: Re: [NF] I need to install a HIPAA compliant secure FTP server on my pc
> To: profox@leafe.com
> Date: Friday, February 26, 2010, 9:15 AM
> Michael,
>
> If you can use a 3rd party hosted service, check out Ted
> Roche's
> recommended rsync.net service. They provide hosted storage
> with every
> possible interface including SFTP, SFTP, WebDAV/S, and SCP.
> Very
> reasonably priced - you pay for what you use so for "small"
> storage
> requirements like a few gig, you're only talking about
> ~$3/month (no
> setup fees, no long term commitments).
>
> Rsync.net claims HIPAA compliance. In the past, we used
> this service to
> process 200Gb of pharma salesforce data with HIPAA security
> requirements
> with no problems.
>
> In my opinion, its MUCH better to use a hosted service for
> these type of
> requirements vs. trying to install, configure,
> maintain/upgrade, and
> learn how to use a locally installed application (or set
> of
> applications). I bet you can signup for an Rsync.net HIPAA
> compatible
> SFTP account for less money than a (decent) cup of coffee
> and faster
> than you can download a 3rd party SFTP server.
>
> Rsync.net - highly recommended!!!!
>
> Malcolm
>
> PS: If you're looking for utilities to easily transfer
> files back and
> forth between an SFTP account, Rsync.net has a bunch of
> free ones that
> can simplify your life. We're already big fans of a
> commercial product
> called Webdrive (about $50) and have this product installed
> on most of
> our workstations so this is what we typically use to access
> our SFTP
> accounts. Webdrive allows you to map a drive letter to an
> SFTP account.
> After this mapping has taken place (can optionally happen
> at startup),
> you can access your SFTP account via Explorer and/or via
> standard
> Windows file paths in your applications. Works
> transparently with your
> VFP (and Python!) apps under Windows. We've used Webdrive
> with great
> success with Windows 2000, XP, and Windows 7 (32 and 64
> bit). Webdrive -
> another highly recommended product.
>
[excessive quoting removed by server]
_______________________________________________
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/495344.1385.qm@web31401.mail.mud.yahoo.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Author: Michael Madigan
Posted: 2010-02-26 15:06:05 Link
Thanks to all who replied. I'm going to take these recommendations to my client.
Mike
_______________________________________________
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/361821.27238.qm@web31407.mail.mud.yahoo.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Author: Nicholas Geti
Posted: 2010-02-26 16:36:32 Link
Another advantage, if they support it, is to have them run the HIPAA
analysis program on your submissions. It will tell you whether your
submissions will pass the rules and make it into payment mode before wasting
time with an abort and no messages.
----- Original Message -----
From: "Michael Madigan" <mmadi10699@yahoo.com>
To: "ProFox Email List" <profox@leafe.com>
Sent: Friday, February 26, 2010 3:04 PM
Subject: Re: [NF] I need to install a HIPAA compliant secure FTP server on
my pc
> Thanks Malcolm.
>
> I have been reading a little about HIPAA and think you're probably right
> on the money. Why risk setting up my secure server incorrectly and risk a
> possible lawsuit? At least if I set it up at a hosting company I can
> defer some of the liability to them.
>
>
>
> --- On Fri, 2/26/10, Malcolm Greene <profox@bdurham.com> wrote:
>
>> From: Malcolm Greene <profox@bdurham.com>
>> Subject: Re: [NF] I need to install a HIPAA compliant secure FTP server
>> on my pc
>> To: profox@leafe.com
>> Date: Friday, February 26, 2010, 9:15 AM
>> Michael,
>>
>> If you can use a 3rd party hosted service, check out Ted
>> Roche's
>> recommended rsync.net service. They provide hosted storage
>> with every
>> possible interface including SFTP, SFTP, WebDAV/S, and SCP.
>> Very
>> reasonably priced - you pay for what you use so for "small"
>> storage
>> requirements like a few gig, you're only talking about
>> ~$3/month (no
>> setup fees, no long term commitments).
>>
>> Rsync.net claims HIPAA compliance. In the past, we used
>> this service to
>> process 200Gb of pharma salesforce data with HIPAA security
>> requirements
>> with no problems.
>>
>> In my opinion, its MUCH better to use a hosted service for
>> these type of
>> requirements vs. trying to install, configure,
>> maintain/upgrade, and
>> learn how to use a locally installed application (or set
>> of
>> applications). I bet you can signup for an Rsync.net HIPAA
>> compatible
>> SFTP account for less money than a (decent) cup of coffee
>> and faster
>> than you can download a 3rd party SFTP server.
>>
>> Rsync.net - highly recommended!!!!
>>
>> Malcolm
>>
>> PS: If you're looking for utilities to easily transfer
>> files back and
>> forth between an SFTP account, Rsync.net has a bunch of
>> free ones that
>> can simplify your life. We're already big fans of a
>> commercial product
>> called Webdrive (about $50) and have this product installed
>> on most of
>> our workstations so this is what we typically use to access
>> our SFTP
>> accounts. Webdrive allows you to map a drive letter to an
>> SFTP account.
>> After this mapping has taken place (can optionally happen
>> at startup),
>> you can access your SFTP account via Explorer and/or via
>> standard
>> Windows file paths in your applications. Works
>> transparently with your
>> VFP (and Python!) apps under Windows. We've used Webdrive
>> with great
>> success with Windows 2000, XP, and Windows 7 (32 and 64
>> bit). Webdrive -
>> another highly recommended product.
>>
[excessive quoting removed by server]
_______________________________________________
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/BEDE88C538024B41990420BDA3DDB0B3@dual
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Author: Michael Madigan
Posted: 2010-02-27 04:57:52 Link
All we are doing is transferring sensitive data from a hospital to a collection agency. The collection agency in this case is acting like an expediter to the insurance companies. We're just worried about security.
--- On Fri, 2/26/10, Nicholas Geti <ngeti@optonline.net> wrote:
> From: Nicholas Geti <ngeti@optonline.net>
> Subject: Re: [NF] I need to install a HIPAA compliant secure FTP server on my pc
> To: "ProFox Email List" <profox@leafe.com>
> Date: Friday, February 26, 2010, 4:36 PM
> Another advantage, if they support
> it, is to have them run the HIPAA
> analysis program on your submissions. It will tell you
> whether your
> submissions will pass the rules and make it into payment
> mode before wasting
> time with an abort and no messages.
>
>
> ----- Original Message -----
> From: "Michael Madigan" <mmadi10699@yahoo.com>
> To: "ProFox Email List" <profox@leafe.com>
> Sent: Friday, February 26, 2010 3:04 PM
> Subject: Re: [NF] I need to install a HIPAA compliant
> secure FTP server on
> my pc
>
>
> > Thanks Malcolm.
> >
> > I have been reading a little about HIPAA and think
> you're probably right
> > on the money.