PanatrackerGP Security questions

PanatrackerGP Data Flows

PanatrackerGP exists in two parts. The first part is a website hosted on a Windows server using Internet Information Services (IIS). We refer to this as the PanatrackerGP portal. The second part is the Android based handheld application. The portal is used for administering PanatrackerGP users, profiles, settings, and contains the history of transactions performed on the handheld application. The transactions themselves are performed on the handheld scanners.

The handheld application communicates via web services with the portal. This is done over whichever port the PanatrackerGP portal is hosted on.

The portal then communicates with GP in two ways. We read from GP using standard SQL connection string via a SQL login. We write to GP by generating XML to provide to GP’s eConnect module.

For automated label printing, the PanatrackerGP drops a .job file in a directory that is monitored by a piece of software called NiceLabel Automation Manager. NiceLabel Automation Manager will read this file, follow it instructions to print a label with the specified data to the specified printer and then delete the file. From here it is standard Windows print logic. The server then communicates with the printers via TCP/IP, over port 9100 by default.

PanatrackerGP require remote access to production data

The PanatrackerGP software exists within your network, we don’t need remote access to your production data. All of the data would remain within the network(s) the handhelds and PanatrackerGP host server are connected to.

Does PanatrackerGP require any Site-to-Site VPNS?

This will be dependent on how your organization’s network is configured. The handheld devices running the PanatrackerGP application and the label printers you’d like to use for automated label printing need to be able to communicate with the server that hosts the PanatrackerGP portal. If the handhelds/printers and the server hosting PanatrackerGP are in different locations, typically a Site-to-Site VPN would need to be configured to allow for that communication.

Does PanatrackerGP support encryption in transit utilizing TLS 1.2 or greater?

Yes. PanatrackerGP exists as a website hosted via IIS on your server. To enable encryption in transit, that website would just need to be bound with an SSL Certificate. If you have a certificate we can add to the binding in IIS, you can add that to the site.

Does PanatrackerGP support encryption at rest, including the use of TPM chips?

PanatrackerGP’s data is stored in the PanatrackerGP database on your SQL Server. There is no data stored on the handheld devices.

Was this helpful?