RE: Remote access solution

[Robert Hoff <rhoffrr () yahoo com>]

Yes, but the fact that it's handy (Win remote desktop) doesn't change the fact
that you have to expose lots of nasty, easy to exploit ports in ways that
aren't trivial to fix (ACL's work, but if we're looking for BASIC, hardly an
easy solution).

VNC thru SSH is the way to point him.  Exposes 1 port, well known and reviewed
code, easy updates.  Unlike the Microsoft solution.

My opinion only.

Original Message:
-----------------
From: Trevor Cushen Trevor.Cushen () sysnet ie
Date: Fri, 31 Jan 2003 17:28:26 -0000
To: ojcano () scif com, security-basics () securityfocus com
Subject: RE: Remote access solution



I have had a lot of success with Windows 2000 VPN solutions and is very
neat and easy to setup.  Use SSH2 through it if Unix is within the DMZ
and also tightVNC will work through it too.

SSH2 client are freely available for Windows machines as of course the
Windows VPN client is too.  The VPN client is also availble for Windows
ME and NT workstations too.

The remote desktop from windows is quite good these days too if gui
interfaces are what you need.

Hope this helps


Trevor Cushen
Sysnet Ltd

www.sysnet.ie
Tel: +353 1 2983000
Fax: +353 1 2960499



-----Original Message-----
From: Orlando J. Cano [mailto:ojcano () scif com] 
Sent: 30 January 2003 00:58
To: security-basics () securityfocus com
Subject: Remote access solution


I have recently been assigned to join efforts with our Network group in
coming up with a secure  remote access solution for our Network. This
will involve accessing servers in our DMZ. I was wondering if this
securityfocus community could elaborate on how secure VNC, Freevision or
Terminal Services are or better yet recommend another solution. 
Any comments would be greatly appreciated.

Thanks

oc




**************************************************************************************

This email and any files transmitted with it are confidential and intended 
solely for the use of the individual or entity to whom they are addressed. 

If you have received this message in error please notify SYSNET Ltd., at
telephone no: +353-1-2983000 or postmaster () sysnet ie

**************************************************************************************


__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com