CRM Customer Portal - Security White Paper

  • Upload
    jfc

  • View
    219

  • Download
    0

Embed Size (px)

Citation preview

  • 8/15/2019 CRM Customer Portal - Security White Paper

    1/2

    CRM Customer Portal Security

    An Overview of Network Architecture Options

    It is often vital for applications to be able to secure the data passed to and from an internal server. With CRM

    Customer Portal, you can use several technologies to create a secure channel. This paper establishes the architecture

    options available and points to detailed technical information.

    CRM Customer portal is an enterprise web application developed in the DotNetNuke

    framework which is built on a Microsoft ASP.NET platform and connects to your internal

    CRM system using exclusively Web Services.

    CRM Customer Portal can be installed outside you internal network in a web server and

    the connection to the internal database is secured by a firewall.

    The complete CRM system can be viewed as a distributed application and, as such, the

    level of security it provides is the same as the level of security each of the different

    layers can sustain.

    The portal has been tested to prevent any breaches that could be exploited and the

    website security is guaranteed due to a server-side analysis of the transmitted

    information to avoid malicious intent.

    DotNetNuke secures your personal information from unauthorized access, use or

    disclosure. DotNetNuke secures the personally identifiable information you provide on

    computer servers in a controlled, secure environment, protected from unauthorized

    access, use or disclosure. When personal information is transmitted to other Web sites,

    it is protected through the use of encryption, such as the Secure Socket Layer (SSL)

    protocol.

    Related Information

    http://www.actuasoftware.com

    Internet Information

    Services

    Securing Web Sites and

    Applications

    Deployment Guide for the

    Security Configuration

    Wizard

    Security Guidance Center

    for IIS

    ASP.NET

    Security Whitepapers

    Installation and Setup

    Whitepapers

    SQL Server Whitepapers

    General Whitepapers

    DotNetNuke

    Managing Security,

    Membership, and Roles

    Hardening DotNetNuke

    Installations

    Code Access Security

    Community Forums

    http://www.actuasoftware.com/http://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://www.microsoft.com/technet/security/prodtech/IIS.mspxhttp://www.microsoft.com/technet/security/prodtech/IIS.mspxhttp://www.microsoft.com/technet/security/prodtech/IIS.mspxhttp://www.microsoft.com/technet/security/prodtech/IIS.mspxhttp://www.microsoft.com/technet/security/prodtech/IIS.mspxhttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#securityhttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#setuphttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#setuphttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#setuphttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#setuphttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#setuphttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#sqlhttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#sqlhttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#generalhttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#generalhttp://www.dotnetnuke.com/tabid/773/Default.aspxhttp://www.dotnetnuke.com/tabid/773/Default.aspxhttp://www.dotnetnuke.com/tabid/773/Default.aspxhttp://www.dotnetnuke.com/tabid/773/Default.aspxhttp://www.dotnetnuke.com/LinkClick.aspx?fileticket=qkVjRRDHNwU%3d&tabid=478&mid=857http://www.dotnetnuke.com/LinkClick.aspx?fileticket=qkVjRRDHNwU%3d&tabid=478&mid=857http://www.dotnetnuke.com/LinkClick.aspx?fileticket=qkVjRRDHNwU%3d&tabid=478&mid=857http://www.dotnetnuke.com/LinkClick.aspx?fileticket=qkVjRRDHNwU%3d&tabid=478&mid=857http://www.dotnetnuke.com/LinkClick.aspx?fileticket=qkVjRRDHNwU%3d&tabid=478&mid=857http://www.dotnetnuke.com/LinkClick.aspx?fileticket=ko3NOxfqlno%3d&tabid=478&mid=857http://www.dotnetnuke.com/LinkClick.aspx?fileticket=ko3NOxfqlno%3d&tabid=478&mid=857http://www.dotnetnuke.com/tabid/795/Default.aspxhttp://www.dotnetnuke.com/tabid/795/Default.aspxhttp://www.dotnetnuke.com/tabid/795/Default.aspxhttp://www.dotnetnuke.com/LinkClick.aspx?fileticket=ko3NOxfqlno%3d&tabid=478&mid=857http://www.dotnetnuke.com/LinkClick.aspx?fileticket=qkVjRRDHNwU%3d&tabid=478&mid=857http://www.dotnetnuke.com/LinkClick.aspx?fileticket=qkVjRRDHNwU%3d&tabid=478&mid=857http://www.dotnetnuke.com/tabid/773/Default.aspxhttp://www.dotnetnuke.com/tabid/773/Default.aspxhttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#generalhttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#sqlhttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#setuphttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#setuphttp://www.asp.net/resources/whitepapers/default.aspx?tabid=41#securityhttp://www.microsoft.com/technet/security/prodtech/IIS.mspxhttp://www.microsoft.com/technet/security/prodtech/IIS.mspxhttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://technet2.microsoft.com/WindowsServer/en/library/7cb7e9f7-2090-4c88-8d14-270c749fddb51033.mspx?mfr=truehttp://www.actuasoftware.com/
  • 8/15/2019 CRM Customer Portal - Security White Paper

    2/2

    Actua Software 111 N Market Street, 6th Floor Suite 670 San Jose, CA 95113 USA

    The above web application is hosted on your internal or external IIS web server, in either case the secure isolation of

    content is guaranteed by providing an independent environment targeted to hosting content for users who do not have

    general access to your corporate network.

    The possibility of hardening servers for specific server roles allows to focuses on securing server -to-servercommunication. The Web Server connection to the internal CRM system was tailored for a unique touch-point to the

    corporate network environment, so it can be easily secured by software-based or hardware-based firewall with or

    without encryption.

    By putting IIS and Firewall security configurations in place, companies can avoid the inherent security risks associated

    with this technology. Web administrators should carefully examine the deployment and configuration options to

    prevent the transmission of inappropriate content that violates corporate policy. Collaboration security is extremely

    valuable to maintaining network performance and user productivity; therefore, CRM Customer Portal should not be

    overlooked in any security strategy.

    CRM Customer Portal

    Actua Software CRM Customer Portal is an integrated, adaptable portal solution that enables you and your

    company to rise to the next level in your customers relations. CRM Customer Portal was built on top of

    DotNetNuke open-source project started by Microsoft, which means technology with higher customization

    features and with a complete set of available skins and modules for all of your needs. And because it is designed

    for Microsoft Dynamics CRM, it easily works with the systems your company already has implemented. By

    automating and streamlining customer relations in the internet channel, CRM Customer Portal brings together

    people, processes and technologies, increasing the productivity and effectiveness of your business, and helping

    you drive business success.

    For more information about CRM Customer Portal, go to: www.actuasoftware.com

    For More InformationFor more information about Actua Software products and services, call the Actua Software Sales Information Center at

    (408) 351-3300. In Europe, call the Actua Software European Information Centre at +351 22-9419379. To access

    information using the World Wide Web, go to:

    www.actuasoftware.com

    For more information about Microsoft products and services, go to:www.microsoft.com

    For more information about DotNetNuke project, go to:www.dotnetnuke.com

    2007 Actua Software. All r ights reserved. This case study is for informatio nal purposes onl y. ACTU A SOFTWAR E MAKES NO WARR ANTIE S,

    EXPRESS OR IMPLIED, IN THIS SUMMAR Y.

    Actua Software and CRM Customer Portal are either registered trademarks or trademarks of Actua Software in the United States and/or other

    countries. All other trademarks are property of their respective owners.

    http://www.actuasoftware.com/http://www.actuasoftware.com/http://www.microsoft.com/http://www.microsoft.com/http://www.microsoft.com/http://www.dotnetnuke.com/http://www.dotnetnuke.com/http://www.dotnetnuke.com/http://www.dotnetnuke.com/http://www.microsoft.com/http://www.actuasoftware.com/