Re: RDP, RWW and VPN difference

That's an interesting little nugget ;-).

--
Les Connor [SBS Community Member - SBS MVP]
-----------------------------------------------------------
SBS Rocks !
----------------------
"Tell me and I'll forget. Show me and I'll remember. Involve me and I'll
understand." - Confucius


"Charlie Russel - MVP" <charlie@xxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:u7PGD6MwGHA.1808@xxxxxxxxxxxxxxxxxxxxxxx
And a big feature coming to big server land in Longhorn. Different name,
slightly different implementation, but they hate that we've got the
feature and they don't.

--
Charlie.
http://msmvps.com/xperts64


Les Connor [SBS Community Member - SBS MVP] wrote:
I'll give you this ....

It's great to see a security expert installing SBS, and bringing what he
knows to his implementations and to the community. Good work Leythos.

For the vast majority of the rest of us, a security expert that's more
than smoke and mirrors is hard to find - perhaps even impossible. In that
position, and considering that RWW works 'out of the box', and is
inherently more secure than the 'default' VPN some might fall into - I'd
give kudo's to SBS DEV as well :-).

No matter what we say, Remote Web Workplace is the single most talked
about and valuable feature in SBS, and that's from the end customers
point of view :-).


"Leythos" <void@xxxxxxxxxxx> wrote in message
news:%njEg.53432$vl5.4027@xxxxxxxxxxxxxxxxxxxxxxxxx
In article <OzgxI6CwGHA.4140@xxxxxxxxxxxxxxxxxxxx>,
charlie@xxxxxxxxxxxxxxxxxxxxxxx says...

What Susan said. ;)

Seriously - I've yet to see virtually anyone implement VPN any other
way
than the default. And for that implementation, I definitely prefer RWW.
And,
when I add in Dana's two factor authentication, with one-time
passwords,
I
like that a whole lot better still.

What is the default?

It really comes down to what you know and what hardware you have
experience with.

Just because you don't have a lot of security experience doesn't mean
you can't learn from those that do.

A cheap D-Link DFL-700 router/firewall (under $300) will act as a PPTP
Server and allow you to create groups/users on it, then allows you to
restrict those VPN sessions to specific ports/IP in the network.

Before SBS and RWW we use to work with VPN's all the time, nothing has
changed in all these years. What we see now are people that don't
experience the real security devices and are using NAT Routers as
firewalls and they've lost all the quality features of firewwalls by
doing so.

I like the idea of a OTP, but, since I've already got a firewall at
EVERY Clinets location, I don't need to add anything to SBS (or any
Windows Server network) to provide two pass authentication.

Oh, and if you are using a real firewall you get other benefits:
Attachment stripping in the inbound SMTP Session, removal of bad headers
from inbound SMTP, removal of some detected bad items from inbound SMTP
sessions, email size limiting, removal of bad things from HTTP Sessions,
removal of download items from HTTP Sessions (by file type), blocking of
Active-X, etc....

I'm not trying to start an argument, but you guys really need to see
that there was an existing and proven method that worked/works as well
or better than RWW (as packaged with SBS) when properly implemented.

--

spam999free@xxxxxxxxxx
remove 999 in order to email me




.

Relevant Pages

  • Re: RDP, RWW and VPN difference
    ... For the vast majority of the rest of us, a security expert that's more than ... SBS DEV as well :-). ... And for that implementation, I definitely prefer RWW. ... restrict those VPN sessions to specific ports/IP in the network. ...
    (microsoft.public.windows.server.sbs)
  • Re: accessing the system TEMP environment variable
    ... You'd probably better ask in the sbs newsgroup, ... MCSE, CCEA, Microsoft MVP - Terminal Server ... "Do not use temp folders per session" ... If users need to access the same files from their sessions, ...
    (microsoft.public.windows.terminal_services)
  • Re: Locked My Self out of rdp
    ... sbs 2k3 only allows 2 rdp connections for administrative ... If the existing two sessions are active, you are normally offered the choice to connect to one of the existing sessions. ... You do also have the option of connecting to the console (which is considered to be independent of the two allowed Remote sessions), using either the /console or /admin switches to the Remote Desktop Client ... Steve Foster [SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 and SQL license
    ... If you are using unauthenticated sessions there is no problem. ... SBS IIS is ... SQL, you get the right to use it as a backend for free. ... Authenticated sessions opens another can of worms. ...
    (microsoft.public.windows.server.sbs)
  • Re: What could cause Exchange error 1164 ?
    ... the default information store opens 60 JET tables may not be adequate ... level of activity on this storage group. ... The number of sessions could not be an issue (SBS with 9 users). ...
    (microsoft.public.windows.server.sbs)