Securing your local MySQL database

The following are suggestions for securing your local MySQL database. We cannot assist with any local networking requirements for your facility; if you have concerns we suggest you contact a local IT professional.

• Your RGP workstations need access to the MySQL server within your local area network (LAN). Thus you need to make sure port 3306 is open within the software firewall for your MySQL server. This is only a requirement for your server computer; you do not want your hardware/router firewall to expose your MySQL server to the outside internet.
  
• If your customers have access to a WIFI network within your facility, they should be on a separate network than your MySQL server. You can split your single internet into two WIFI networks easily.
• It is imperative that your entire facility's LAN and WIFI networks be secure from outside threats. You can accomplish this by having security in place on your internet router and/or installing a quality hardware firewall.
  
• We highly recommend WINDOWS DEFENDER (FREE and standard with Windows) or ESET-NOD32 (Paid) for virus protection software, as there are NO known issues. They are inexpensive, reliable, and do not conflict with RGP like other virus software.
• The offsite backup happens via standard outbound web requests. Some antivirus software has had issues with MySQL, in which case you either need to switch to ESET or add an exception in your antivirus for MySQL. Your offsite backup is secured on our servers by your private encryption key.