Re: RDP, RWW and VPN difference
- From: "Charlie Russel - MVP" <charlie@xxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 14 Aug 2006 22:49:10 -0700
What Susan said. ;)
Seriously - I've yet to see virtually anyone implement VPN any other way
than the default. And for that implementation, I definitely prefer RWW. And,
when I add in Dana's two factor authentication, with one-time passwords, I
like that a whole lot better still.
--
Charlie.
http://msmvps.com/xperts64
Leythos wrote:
In article <uNFTVHAwGHA.4880@xxxxxxxxxxxxxxxxxxxx>,
charlie@xxxxxxxxxxxxxxxxxxxxxxx says...
Of the three, RWW is the safest and the most flexible. VPN opens up your
network to whatever malware happens to have found its way onto the remote
client. RDP alone limits your options to a single PC.
Wrong, VPN does not have to open your network, it only does so if you
improperly implement VPN.
Our users VPN into the firewall with one user/password that they don't
control, it's NOT the same user/password they log onto Windows with.
The firewall has a rule, per FW authentication group that limits each
group of users to TCP3389 and either the IP of the terminal server or
the specific workstation they have been assigned in the company.
We have all the RD/TS sessions locked down.
So, with this in mind, there is nothing that can get through the VPN
that could not get into the RWW session. This method, VPN is more secure
as it requires TWO levels of authentication instead of just one.
.
- References:
- Re: RDP, RWW and VPN difference
- From: Charlie Russel - MVP
- Re: RDP, RWW and VPN difference
- Prev by Date: Re: APC UPS shutdown and SBS
- Next by Date: RE: Client cannot logon to domain - unavailable
- Previous by thread: Re: RDP, RWW and VPN difference
- Next by thread: Re: RDP, RWW and VPN difference
- Index(es):
Relevant Pages
|
