Setting up a NAS

[jkim05]

Thanks for all the help guys. I run a doctor's office, and we have ~10 users max at any time. We actually don't really have any sensitive data on our computers with the exception of our scheduling/practice management software, which we currently back up onto an external HD. Our technology implementation is actually pretty outdated, but since we have no need to upgrade, we haven't. My plan is gradually begin upgrading, rebuilding and/or replacing most of the computers in this office over the next couple of years and having centralized storage would make that much simpler as I would no longer have to figure out what data is stored on what computer.

As for size, I'm thinking 500gb in a RAID 1 configuration should be sufficient, though I'm tempted to go much larger. Is it cost effective to go much larger than that? Also, is it even worth it to RAID two drives or should I just go for external backup to the NAS?

[357]

Originally Posted by jkim05

Thanks for all the help guys. I run a doctor's office, and we have ~10 users max at any time. We actually don't really have any sensitive data on our computers with the exception of our scheduling/practice management software, which we currently back up onto an external HD. Our technology implementation is actually pretty outdated, but since we have no need to upgrade, we haven't. My plan is gradually begin upgrading, rebuilding and/or replacing most of the computers in this office over the next couple of years and having centralized storage would make that much simpler as I would no longer have to figure out what data is stored on what computer.

As for size, I'm thinking 500gb in a RAID 1 configuration should be sufficient, though I'm tempted to go much larger. Is it cost effective to go much larger than that? Also, is it even worth it to RAID two drives or should I just go for external backup to the NAS?

Yes RAID 1 (mirroring) is a good idea. It provides quick, cheap, reliable redundancy. Offsite storage is really more for disaster recovery, aka building burns down and the company has to rebuild.

Also, I have worked for a regional hospital (medical group of 7 or 8 hospitals) and you DO have sensitive data. HIPPA requires you to protect that data or YOU (not your company/employer) can be sued or heavily fined. Even names/addresses can be considered patient data. DO NOT neglect your responsibility to protect it. I would highly recommend that you use some form of encryption. Even if it is a freebie like PGP, it's better than nothing. Most new external hard drives offer it as a feature if you go that route.

If you use encryption and it gets cracked at least you made the effort. That will usually prevent legal action against you or your company. If you do not make the effort, you are at risk should that data get compromised.

[jkim05]

Originally Posted by 357

Yes RAID 1 (mirroring) is a good idea. It provides quick, cheap, reliable redundancy. Offsite storage is really more for disaster recovery, aka building burns down and the company has to rebuild.

Also, I have worked for a regional hospital (medical group of 7 or 8 hospitals) and you DO have sensitive data. HIPPA requires you to protect that data or YOU (not your company/employer) can be sued or heavily fined. Even names/addresses can be considered patient data. DO NOT neglect your responsibility to protect it. I would highly recommend that you use some form of encryption. Even if it is a freebie like PGP, it's better than nothing. Most new external hard drives offer it as a feature if you go that route.

If you use encryption and it gets cracked at least you made the effort. That will usually prevent legal action against you or your company. If you do not make the effort, you are at risk should that data get compromised.

Ok, I guess that is something to consider. As far as I know, as long as data is not stored or transmitted off-site or across a network encryption was not necessary. Basically since all the computers are locked up inside of the office, the office as a whole complies with HIPAA. I could be totally wrong though. In any case I guess there is no reason not to encrypt data, so I might as well.

[357]

Originally Posted by jkim05

Ok, I guess that is something to consider. As far as I know, as long as data is not stored or transmitted off-site or across a network encryption was not necessary. Basically since all the computers are locked up inside of the office, the office as a whole complies with HIPAA. I could be totally wrong though. In any case I guess there is no reason not to encrypt data, so I might as well.

It's a touchy thing. If one computer has internet access, and it networked to others, all data on each one of them could be considered at risk. I know you probably have a firewall and/or router, but they are not foolproof. It doesn't take much effort/$$$ in a small environment like that so it's usually better safe than sorry.

[Volt]

Originally Posted by jkim05

Thanks for all the help guys. I run a doctor's office, and we have ~10 users max at any time. We actually don't really have any sensitive data on our computers with the exception of our scheduling/practice management software, which we currently back up onto an external HD. Our technology implementation is actually pretty outdated, but since we have no need to upgrade, we haven't. My plan is gradually begin upgrading, rebuilding and/or replacing most of the computers in this office over the next couple of years and having centralized storage would make that much simpler as I would no longer have to figure out what data is stored on what computer.

As for size, I'm thinking 500gb in a RAID 1 configuration should be sufficient, though I'm tempted to go much larger. Is it cost effective to go much larger than that? Also, is it even worth it to RAID two drives or should I just go for external backup to the NAS?

Raid 1 is pretty expensive in terms of disk space usage and most NAS I have used came with 4 or 5 disks. At a minimum I would go 3 disks and use RAID 5. Faster feeds, redundancy if 1 disk fails, and if you go to 4 disks so much the better. Disks are cheap insurance.

"Also, is it even worth it to RAID two drives or should I just go for external backup to the NAS?"

Yes, with at leat Raid 1 or better RAID 5 if one drive fails they are still in business and can keep the doors open. If you JBOD (RAID 0) if 1 disk fails - close the doors and go find your backup plan. RAID 5 with 4 disks is the route I would go minimun especially if IT support on site is weak. Disks are cheap....

So my thoughts...

RAID 5 with 750 - 1T for day to day file usage. Even if they don't have a lot of "data" yet, set it up to hold images of the workstations, your Office loads (faster than a cd, etc)

Use 1 or 2 externals to swap out daily to bring one home each night.

[Kreth]

Originally Posted by Volt

"Also, is it even worth it to RAID two drives or should I just go for external backup to the NAS?"

Yes, with at leat Raid 1 or better RAID 5 if one drive fails they are still in business and can keep the doors open.

Excellent post. One quibble... you need 3 drives to do RAID 5. I've never tried setting it up with just 2. Wouldn't that basically be a pre-degraded array, for lack of a better term?
Posted via Mobile Device

[Volt]

Originally Posted by Kreth

Excellent post. One quibble... you need 3 drives to do RAID 5. I've never tried setting it up with just 2. Wouldn't that basically be a pre-degraded array, for lack of a better term?
Posted via Mobile Device

RAID 5 requires at a minimum 3 drives. One can fail and it will operate in a degraded mode (not recommended). With just two drives either RAID 0 or RAID 1. If 2 drives are the options - go with the mirrord drives (RAID 1). I can se my post was what I typed and not what I was thinking