Re: Remote Desktop and VPN
From: SuperGumby [SBS MVP] (not_at_your.nellie)
Date: 01/21/05
- Next message: SuperGumby [SBS MVP]: "Re: Ran config wizard, now no DNS"
- Previous message: SuperGumby [SBS MVP]: "Re: Port problem"
- In reply to: daniel: "Re: Remote Desktop and VPN"
- Next in thread: daniel: "Re: Remote Desktop and VPN"
- Reply: daniel: "Re: Remote Desktop and VPN"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 21 Jan 2005 18:30:41 +1100
VPN is no more secure than direct publishing of TS. Matter of fact, from
some angles a VPN is much less secure.
Just how are you going to use SSH in an SBS environment?
MS released RDP via RWW some time ago, many SBS2003 owners use this
facility.
"daniel" <daniel@nospampreferkosherkingsleynetworks.com> wrote in message
news:uK8aBbk$EHA.1564@TK2MSFTNGP09.phx.gbl...
> Yes there is a small risk when publishing a remote desktop directly. VPN
> or SSH port forwarding is a better way. Standard PPTP VPNs carry a risk so
> try with EAP/TLS or L2TP/IPSEC. If you have ISA you can just disable the
> filter allowing inbound TCP 3389 on standard edition run the CEICW and
> uncheck Terminal Services.
>
> You can also use RWW to connect to remote desktop but I don't believe this
> is anymore secure. Microsoft are due to release RDP over HTTPS much like
> the Exchange RPC proxy so this will eventually provide what we are all
> looking for.
>
>
> "Tom S" <TomS@discussions.microsoft.com> wrote in message
> news:ED5F968E-C012-4851-A303-53248C9DA4C1@microsoft.com...
>>I can access our SBS 2003 from remote with Remote Desktop using the
>>external
>> IP address but I am concerned with security of this and would rather have
>> this set to not allow a remote session to our public IP address. I would
>> like
>> to set up the system to only allow Remote Desktop to the internal IP of
>> the
>> server, VPN into the system and then use remote desktop to the local IP.
>> If I
>> VPN in now I can connect to the server using the internal IP but I can
>> also
>> remote in without VPN by using our external IP. Isn't this a security
>> risk?
>>
>> Can this be setup this way?
>>
>> Thanks in advance for any help.
>>
>> Tom
>
>
- Next message: SuperGumby [SBS MVP]: "Re: Ran config wizard, now no DNS"
- Previous message: SuperGumby [SBS MVP]: "Re: Port problem"
- In reply to: daniel: "Re: Remote Desktop and VPN"
- Next in thread: daniel: "Re: Remote Desktop and VPN"
- Reply: daniel: "Re: Remote Desktop and VPN"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|