Security Basics mailing list archives
RE: PC Anywhere and security
From: "David Gillett" <gillettdavid () fhda edu>
Date: Fri, 24 Feb 2006 11:49:53 -0800
I had a nasty experience a couple of years back with an employee using PCA over a VPN. Symantec may have changed things, but it used to be that if PCA didn't know what system you intended to connect to, it would scan the /24 subnet you were in looking for hosts willing to accept PCA connection. So to anyone who didn't know about the VPN, it looked like some machine inside our network was scanning customers of our employee's broadband provider.... Luckily, I had egress filtering in place, so the only alarm that was set off was mine. David Gillett
-----Original Message----- From: Sap . [mailto:0xsapx0 () gmail com] Sent: Thursday, February 23, 2006 10:56 AM To: martin samson Cc: security-basics () securityfocus com Subject: Re: PC Anywhere and security I recommend requiring the use of a VPN by all vendors, then using the remote access software over the VPN, you can use VPN policies or IPSec policies to prevent the remote user from accessing anything but that box. PCAnywhere is not insecure, but a VPN is secure, PCA can suffer from MITM attacks, possible compromise of the client workstation allowing an attacker to use it to gain access to your network. (Think Remote Exploit + Reverse VNC + PCA) - SaP - On 2/21/06, martin samson <martcci () hotmail com> wrote:Hi group, We used to have PC Anywhere (long long time ago...in the 80's) as a remote support system. We've moved away from it and now a supplier wants to connect to his box with it. What position shouldthe serverbe to be secure (network, DMZ, special zone)? Can you give me an idea on how secure are the last versionsof PC Anywhere?Can a PC Anywhere connection give them access to ournetwork even ifthe user credential limits the rights to specificdirectories on his machine ???Thanks! Marty--------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE -ONLINE TheNorwich University program offers unparalleled Infosec management education and the case study affords you unmatchedconsulting experience.Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and DigitalInvestigations.http://www.msia.norwich.edu/secfocus----------------------------------------------------------------------------------------------------------------------------------------- ------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus -------------------------------------------------------------- -------------
--------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
Current thread:
- PC Anywhere and security martin samson (Feb 22)
- AW: PC Anywhere and security Thomas Stocker (Feb 23)
- Re: PC Anywhere and security Sap . (Feb 24)
- RE: PC Anywhere and security David Gillett (Feb 24)
- <Possible follow-ups>
- FW: PC Anywhere and security Baker, Richard (Feb 24)
- RE: PC Anywhere and security Sadler, Connie (Feb 28)