RE: terminal server security vs vpn

["Beauford, Jason" <Jason.Beauford () unitedpetgroup com>]

Put your TS behind an SSL VPN solution for an extra layer.  Interface
can be quite simple and easy to use.

TS is susceptible to brute force.  TSGrinder is an example.

jmb

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Juan B
Sent: Monday, August 13, 2007 8:38 AM
To: security basics
Subject: terminal server security vs vpn

Hi,

I am looking for a solution to my users so they can
log in from home and work connect to there office
pc's, of course I will use terminlal server.

My question is, why to use double encryption, why use
vpn client to connect to the corporate FW and then to
connect throw it with a ts session, AFAIK Ts is
encrypted as well and one can set the encryption to
high which is the same as VPN right?

I want to nake the connection simple to the user and
securure. do I need also a vpn client, I guess not, am
I missing something here?

I will also change the port to increase security.

Thanks a lot,

Juan 


       
________________________________________________________________________
____________
Need a vacation? Get great deals
to amazing places on Yahoo! Travel.
http://travel.yahoo.com/