Configure a dynamic DNS service hostname in the router (I forget which one ASUS supports. In that router, configure the VPN server. A router such as an ASUS RT-AC68U will do just fine. Install a VPN router at your home (where you will NOT be for the 3 months). Two, if your companies IT staff gets curious about your connections, the IP address they will be seeing won't be associated with a VPS or shared hosting provider. One, you get a dedicated IP address that won't ever change and guaranteed uptime. The reason I say pay for business internet to your house is two fold. Set up the router/gateway to VPN into your server stateside with auto disconnect if the VPN connection fails. On your Mexico side of things, you are going to need a router/gateway that can act as a VPN client. Make sure you test cell fail over and connect to the remote management when it is on the cell connection. All of this is going to be in your house stateside. You'll also need a computer/server that has some remote management. You'll also need to get a UPS that has remote management and a firewall/gateway that has cell fail over. You'll need to pay for business internet with guaranteed uptime. HIPPA violations can and will bankrupt a company and if you are the cause, you can be held liable for damages to the company. IN MY ENTIRE LIFEĪs other have said, you are working under HIPPA. I take no responsibility for any consequences resulting from any and all action resulting from or relating to anything I have written, am writing, or (inclusive or) will write. Any action taken after reading any of my posts is yours and yours alone. This is not legal, technical, or any other type of advice and should not be taken as such. The list of problems and dangers is just an example and is not exhaustive. Doing anything I have outlined could have unintended consequences. Compromising their security in any way is bad. You could also probably use a non transparent proxy that goes to a VM/Raspberry pie.ĭisclaimer: The above post is for educational purposes only! Do not lie to your employer. I know there have to be other ways of doing this other than back to back VPN's. Let me know if it didn't, or if anyone else has some other ideas. But there are probably many other ways of doing this. Can't think of anything else off the top of my head haha.Same issues at #1 when it comes to purging your original IP address.Non commercial internet can go down for days at a time and you might not be able to reconnect the the VPN hardware you left at the house when it comes back up.I tried to do something like this for myself at one point. Apartment complexes are notorious for this. It can sometimes be hard to get a static IP address and the correct ports open with some ISP's.Get a raspberry pie/cheap computer instead of a VM.Get the correct ports open on the ISP/router.You can just buy a raspberry pi or cheap computer, leave it connected to a router at a friends house or somewhere near where you live in the summer. This is essentially the same as 1, but you don't have to rent a server.Back to Back VPN (Hosted at an house friends house).If that server gets compromised and the company VPN gets accessed you will be in a lot of trouble.There are ways to clean all IP addresses from traffic, but you would have to look into that more. Your original IP might be forwarded through the first VPN (inside a packet or in some requests) and be logged on the company VPN.Your company could look at the logs and see that the IP is coming from a hosting service (GCP, AWS, Azure) and that could raise some suspicion. Log the server into your company VPN and forward all of your traffic through your VPN endpoint to their client.If you ever log in to the VPN from Mexico and the company checks their logs it would be pretty obvious. I would assume that the company VPN logs every IP address that logs on, every URI/DNS that is sent through it, and maybe does some packet inspection. There is usually a good reason for everything! Also, a good rule of thumb is don't mess with security measures your company has in place. EDIT: Check the disclaimer at the bottom.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |