RE: Terminal Services over VPN

[Meidinger Chris <chris.meidinger () badenit de>]

terminal services should be treated as insecure traffic. there are various
reasons, but among them 1. the encryption is breakable (search bugtraq for a
discussion about that) and 2. you probably want a more secure authentication
from external hosts than just letting a TS window pop up to anyone who
connects to you. the discussion whether MS VPN is secure is better left
unstarted...

badenIT GmbH
System Support
 
Chris Meidinger
Tullastrasse 70
79108 Freiburg


-----Original Message-----
From: David Y. Ng [mailto:dng () cmhsweb org]
Sent: Thursday, August 14, 2003 9:43 PM
To: security-basics () securityfocus com
Subject: Terminal Services over VPN


Has anyone used Terminal Services over Microsoft's VPN
server? I need to run some program off the server and when I
used just the VPN, it was terribly slow. The solution on paper
is to run the program off Terminal Services and just let it
pass through the VPN which could be faster, supposedly.

Any experiences with this? Is Terminal Services in itself
secure? I read there's some form of encryption also but
is it comparable to VPN in a way?


---------------------------------------------------------------------------
----------------------------------------------------------------------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------