Client Profile:
 | Small Oklahoma hospital with approximately 150 staff, 100 network workstations |
| Hospital very reliant upon Microsoft Outlook, with Exchange 2003 as e-mail server |
| Stringent HIPAA requirements for security auditing |
Project Objectives:
| Design migration of 100+ user medical facility from Windows 2000 to Windows 2003 |
| Assist in migration of Exchange 2000 to Exchange 2003 |
| Design/implement user network perimeter security with firewalls |
| Provide virtual private network (VPN) encrypted LAN access to remote users |
| Enable Outlook Web Access (OWA) on Windows 2003 LAN, utilizing encrypted traffic |
| Enable use of digitally signed, encrypted e-mail in conjunction with Exchange 2003 |
| Existing virus scanning was not centralized which prevented administrators from having a real-time picture of status of virus updates and infection status across the enterprise |
| No centralized operating system update capability existed resulting in risks due to Windows operating systems being un-patched |
| Client users were complaining of numerous issues, however no centralized database was available to allow prioritization |
Project Results:
| DVITS designed and implemented migration of six servers from Windows 2000 to Windows 2003 |
| Internal security and information access auditing established |
| Implemented enterprise-quality VPN firewall to allow establishment of strong perimeter security while allowing use of VPN for remote access to network. |
| OWA implemented using Secure Sockets Layer (SSL) on the local network. This allows encrypted remote access to e-mail, schedules, and contacts thus simplifying collaboration for remote or traveling users |
| Encrypted e-mail established in conjunction with Certificate Server and Exchange to allow HIPAA compliant exchange of e-mail |
| Strategic consulting resulted in short- and medium-term technology plan of action |
| Use of DVITS AIM database allowed consultants to work with the client in prioritizing issues based upon both usability and risk issues |
| Use of Trend Micro Client/Server/Messaging to centralize virus/spyware/malware scanning was recommended |
| Microsoft Software Update Services was implemented to centralize a scheduled operating system update capability |