FW: Question about GoToMyPc services

["Ju Ne" <ddjjembe1 () hotmail com>]

Judith,

Thank you for bring up GoToMyPc services.  We have several users utilizing 
that service in my organization and I haven't had time to do the necessary 
testing.  I would like to add another question to the discussion.

My company works with health information which is protected by HIPAA.  Do 
you know if they store the information that passes through their network?  
If they do then it would be a HIPAA violation.


ddjjembe




> -----Original Message-----
> From: Ms. Judith Taylor [mailto:jtaylor () acvna org]
> Sent: Monday, August 08, 2005 4:05 PM
> To: security-basics () securityfocus com
> Subject: Question about GoToMyPc services
>
> Greetings all,
>
> I finally have a question that warrants more input than I can find on my
>
> own. Being a long-time lurker on this list, I have been slowly learning
> more about security and since having switched to a Linksys Broadband
> Firewall Router, looking at the logs for both incoming and outgoing
> traffic.
>
> One of the machines here has GoToMyPc on it (at the request of the
> software vendor - it's a dedicated machine). Of late I've been noticing
> quite a bit of outgoing traffic from its IP address. The traffic is all
> TCP, but what I'm curious about is that it seems to be sending
> requests/pings/something by going through all its own ports.
>
> example from logviewer:
> 10.xxx.xxx.xxx:1740  66.151.158.177:8200
> 10.xxx.xxx.xxx:1741  66.151.158.177:8200
> 10.xxx.xxx.xxx:1742  66.151.158.177:8200
> 10.xxx.xxx.xxx:1748  66.151.158.177:8200
> 10.xxx.xxx.xxx:1749  66.151.158.177:8200
> 10.xxx.xxx.xxx:1752  66.151.158.177:8200
> 10.xxx.xxx.xxx:1759  216.115.217.254:8200
>
> My first thought is that it is simply "checking in" with the GoToMyPc
> service to see if someone is trying to connect, but I haven't been able
> to suss this out on their website to ascertain if this is truly the case
>
> and not something to worry about. Is what I'm seeing simply the normal
> behavior of the program/service?
>
> Can anyone make any recommendations for a more secure method of remote
> access for a Win2K Pro machine?
>
> Thanks.
> Judith

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/