How do we protect the configuration information on the Click2Gov server?
As an Internet site owner, your company or municipality is responsible for maintaining a secure topology for Click2Gov server. This may include routers, firewalls, DMZs, network address translation and any of a variety of hardware and software solutions. Beyond this there are three items that we strongly recommend for your Click2Gov website. 1) Backup the Click2Gov server to fresh media each time the system is updated or reconfigured and do not overwrite this media with subsequent backups. This way, in the outside chance that a malicious but dormant intrusion makes its way onto the server, it will not be copied into your backup system. 2) Encrypt the cfg directory. This must be done using the Windows Encrypting File System (EFS) and as the user that installed the Click2Gov software and was designated to administrate the Click2Gov server, usually c2gadmin. Also, when the Click2Gov Server is not in use, lock the computer by pressing the Ctrl+Alt+Delete keyboard combination. 3) When the C
