Using Virtual Private Network Connections

Mirth® Appliance by NextGen Healthcare Deployment Guide, 4.1

Using the SSL Tunnels Service

Secure Sockets Layer (SSL) is a cryptographic protocol for providing secure communications over TCP/IP networks. Using SSL enables you to securely exchange messages over public networks such as the Internet. With the SSL Tunnels service, Mirth® Appliance by NextGen Healthcare you can accept SSL connections for any of the listener-based Mirth® Connect connector types such as HTTP, LLP/MLLP, SOAP, and TCP. You can also add SSL to the corresponding destination connectors. Inbound tunnels accept an SSL connection from a remote host and pass it to the listening port of a Mirth® Connect channel on the local system. Outbound tunnels listen on a local port for a Mirth® Connect destination connector, add an SSL layer to the connection, and pass it on to a specific remote host. Note: Consult your network administrators regarding setting up two-way SSL authentication. Select Services > SSL Tunnels to open the SSL Tunnel Management window, which shows all of the currently configured tunnels on the

Mirth® Appliance by NextGen Healthcare Deployment Guide, 4.1

Edit or Delete an Existing VPN Connection

You can edit or delete an existing connection. Select Services > VPN Connections. Select the linked name in the list on the VPN Connection Management window. To edit the user, you can update the IP address or download an updated client software bundle to send to the user To delete the user, select Delete, and then confirm you want to delete the connection. Deleting a user immediately revokes the digital certificate and disconnects them from the system. The number of VPN users is limited by the size of the private network defined. The default private network configuration allows for 63 VPN connections. The number of concurrent connections is only limited by the processing capacity of your Mirth® Appliance by NextGen Healthcare. Manage remote connection to local server window Parent topic: Using Virtual Private Network Connections

Mirth® Appliance by NextGen Healthcare Deployment Guide, 4.1

Download a VPN Client Software Bundle

After you add a connection, your next step is to download a VPN client software bundle to send to the user. Download VPN Client Bundle window On the Download VPN Software Bundle window, select the VPN user’s platform (Windows or Linux), and then enter the public server address and a password for encrypting the software bundle’s contents. The Public Server Address field is the IP address that the client uses to connect to the appliance. If the user is connecting over an existing private network, they may be able to connect to the actual IP address of the appliance (this is the default value). Most likely, the user is on the other side of a firewall and it is necessary to give them an external IP address. You can attempt to look up the external IP address of the appliance using the Detect External IP Address button. If there are any questions about which IP address to use, contact your network administrator. Note: If there is a firewall between the user and the appliance, then the Public

Mirth® Appliance by NextGen Healthcare Deployment Guide, 4.1

Add a VPN Connection

You can establish VPN connections on your appliance to provide a secure path for administrative or message traffic. Select Services > VPN Connections. Select Add Connection to open to the Add VPN Connection window. Add VPN Connection window Select the type of connection. Connection to this appliance is the default and is used to create a package that enables Windows, Linux, or another appliance to connect to your computer. Connection to another appliance requires you to have a VPN package already downloaded from another appliance onto your computer. Enter a unique name for the connection. Select Add to add the connection.The Download VPN Software Bundle window opens. Parent topic: Using Virtual Private Network Connections

Mirth® Appliance by NextGen Healthcare Deployment Guide, 4.1

Configuring a VPN Server

Use the Configure VPN Settings window to configure VPN connections. Select System > VPN Server to access the VPN configuration settings. The Mirth® Appliance by NextGen Healthcare has the ability to terminate VPN connections for various uses. You can use a VPN tunnel to administer the appliance or use it to pass HL7 traffic for Mirth® Connect. Different clients connected to the VPN server can talk to each other through the appliance by selecting the Enable client to client traffic checkbox. This process is also known as IP forwarding. Configure VPN Settings window Parent topic: System Menu

Mirth® Appliance by NextGen Healthcare Deployment Guide, 4.1

System Menu

You can perform Mirth® Appliance by NextGen Healthcare system administration with the System menu on the Control Panel web application. Note: No special operating system or command line knowledge is necessary to perform any of the functions in the System menu. View Details about the Mirth Appliance by NextGen Healthcare The dashboard displays information about your appliance and its current state. Create Backup Sets Backup sets are collections of components with a given destination for the backup data. Restore a Backup to an Appliance When you restore a backup, you can select any or all of the components in the backup file’s backup set to restore. Update the Mirth Appliance by NextGen Healthcare Software Updates to Mirth® applications, new features, bug fixes, and security patches are all delivered online and controlled from the appliance. Mirth Appliance by NextGen Healthcare Certificates The appliance SSL Certificate window enables you to work with the local certificate authority or

Using Virtual Private Network Connections

Recommendations

Using the SSL Tunnels Service

Edit or Delete an Existing VPN Connection

Download a VPN Client Software Bundle

Add a VPN Connection

Configuring a VPN Server

System Menu

Using the SSL Tunnels Service

Edit or Delete an Existing VPN Connection

Download a VPN Client Software Bundle

Add a VPN Connection

Configuring a VPN Server

System Menu