How Secured is Your FileMaker Database?

By virtue of FileMaker software, databases can be created for individual use or shared through FileMaker Server or with Internet or intranet users. When thinking about the security, the first consideration should be the kind of data that is shared. Then the existing vulnerabilities along with the kind of protection to be used for database and data files must be considered. In some scenarios, data may not be specifically sensitive, confidential or business-critical. In some cases the software may be in a trusting, open environment or just a single individual uses it in some secure location. However, mostly data is sensitive or business-critical; steps must be taken to protect it.

Generally three issues must be considered for protecting the databases- availability, privacy along with integrity. The database design as well as the data must be protected from both intentional as well as unintentional threats. There might be people who try to copy things, damage the system, look at various data, ruin layouts and reports, enter false data, and break scripts or corrupt calculations. Your data has to face some very common threats that include intentional threats which are posed by known parties. These are generally hackers who might benefit by damaging data. Unintentional threats can also pose a risk from accidents and known parties. Inadvertently mistakes can be made by authorized users even through changing or deleting of things. Anonymous parties may also prove to be risky as they cause internet-based threats by attempting to cause damage, steal information or even make web-based systems unavailable.

FileMaker has some built-in security features like privilege sets as well as accounts. Accordingly the security should be planned.

• Security should be layered at each access area including setting privileges and accounts in databases, locking down computers, restricted access to directories, etc.
• There should be some amount of flexibility in the security plan so that the individualistic data access requirements can be considered.
• The security should be evaluated continually so as to ensure that your data is still being protected. It must be ensured that the most secure and latest software versions are used, passwords are changed in an ongoing basis, backup scheme is rigorously followed and log files are evaluated to avoid surprises.

Best practices to secure database

• Strong passwords should be used.
• Do not use peer-to-peer configuration; use FileMaker Server instead.
• FileMaker databases should not be web-enabled if the data is sensitive.
• The privilege sets are highly configurable; you should good advantage of that so that roles are created and users given individual account instead of shared ones.
• The files should be hidden from the network. Users should be given openers files instead or even files added to Favourites of users in Quick Start of FileMaker.
• A robust recovery as well as backup procedure should be implemented.
• SSL encryption should be enables in FileMaker Server.
• Ensure that the Server admin console requires a password. It must be minded that those who have access to the console are able to create local copies of databases which may pose security risk.
• Server OS firewall may be used in feasible cases so that only authorized users are allowed access.
• The backup media along with server should be physically secured.
• Data Warehouse passwords or usernames must not be shared or stored when External SQL Sources feature is being used for connection with MIT Data warehouse.

FileMaker is a platform that ensures that a user can navigate outside network connectivity and hardware provisioning and that too with very little IT support. With every passing day and latest versions, the security features are becoming more prominent as well as enhanced. The latest security models are quite intuitive, making it extremely attractive for usage by small, medium as well as large organizations. To get maximum benefits of Filemaker, you may consider hiring services of a custom Filemaker development company.

We provide Filemaker database development services. If you would like to hire Filemaker expert from us, we would be glad to assist you at Mindfire Solutions.