RE: sshd for windows

["DeGennaro, Gregory" <Gregory_DeGennaro () csaa com>]

I agree that this should not be a religious war.

How about this Derek, look into Remote Desktop connection first and if that
seems insecure for you, use OpenSSH for Windows from the URL given to you?

OpenSSH supports Blowfish (stronger encryption and faster than 3DES) and
3DES (168 bit encryption).  Of course, it supports DES (56 bit encryption)
but can be easily broken in today's desktop enviroment, while the first two
needs a cluster or NSA computer system.

Greg

-----Original Message-----
From: Depp, Dennis M. [mailto:deppdm () ornl gov] 
Sent: Tuesday, June 17, 2003 6:32 PM
To: DeGennaro, Gregory; Derek Perry; security-basics () securityfocus com
Subject: RE: sshd for windows

As is Windows Terminal Services and Remote Desktop.  I would expect
there are more installations of Window Terminal Services on Windows 2000
servers that there are installations of OpenSSH or WinSSH on Windows
2000.  

Greg,  I really don't want to turn this into a religious war.  Derek is
looking for a way to log in remotely to a Windows 2000 server.  I was
trying to give him other options to consider.

Denny


-----Original Message-----
From: DeGennaro, Gregory [mailto:Gregory_DeGennaro () csaa com] 
Sent: Tuesday, June 17, 2003 4:13 PM
To: Depp, Dennis M.; Derek Perry; security-basics () securityfocus com

Traffic is not encrypted in 3DES or AES.

OpenSSH and Winssh are proven products.

Regards,

Greg DeGennaro Jr., CCNP
Security Analyst
415-551-5462
415-317-2119


-----Original Message-----
From: Depp, Dennis M. [mailto:deppdm () ornl gov]
Sent: Tuesday, June 17, 2003 9:16 AM
To: Derek Perry; security-basics () securityfocus com
Subject: RE: sshd for windows

Why not use Remote Destop Connection?  It comes with Windows 2000.

Dennis 

> -----Original Message-----
> From: Derek Perry [mailto:gte274v () mail gatech edu]
> Sent: Monday, June 16, 2003 9:30 PM
> To: security-basics () securityfocus com
>
> Is there a sshd for Windows (W2K Server is the actual OS) that is 
> freely available?  I am doing a senior design project for a class at 
> school and I would like a way to log in remotely to the server at the 
> company which I am working with (the network admin hasnt even done the

> security updates on the webserver, so he is hopeless).  Thanks in 
> advance!
>
> --
> Derek A. Perry
> derek () cc gatech edu
>
>
> --------------------------------------------------------------
> -------------
> Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by 
> top analysts!
> The Gartner Group just put Neoteris in the top of its Magic Quadrant,
> while InStat has confirmed Neoteris as the leader in marketshare.
>      
> Find out why, and see how you can get plug-n-play secure 
> remote access in
> about an hour, with no client, server changes, or ongoing maintenance.
>           
> Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
> --------------------------------------------------------------
> --------------

------------------------------------------------------------------------
---
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access
in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
------------------------------------------------------------------------
----

------------------------------------------------------------------------
---
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access
in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
------------------------------------------------------------------------
----



---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------