Re: RDP over the internet

[William Söderberg <william.soderberg () gmail com>]

I would recommend using an IPsec tunnel, preferably with certificate
based authentication. Then tunnel your RDP traffic through that
instead of exposing a Microsoft Windows machine to the Internet.

Vulnerabilites in RDP is not unheard of.
Sources: http://technet.microsoft.com/en-us/security/bulletin/MS09-044
http://technet.microsoft.com/en-us/security/bulletin/ms11-017
http://technet.microsoft.com/en-us/security/bulletin/ms11-065

Even Microsoft Windows TCP/IP stack contained a remote execution
vulnerability that was patched last year.
Source: http://technet.microsoft.com/en-us/security/bulletin/ms11-083

2012/1/10 <mariofa88 () gmail com>
> Hi all I would like to know what are your opinions of using RDP over the internet on a Windows 2008 R2 server? Are 
> there any major known exploits or vulnerabilities? How safe is the server with having port 3389 open to the internet.
>
> Rgds,
> Mario
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------



--
Med vänliga hälsningar / Kind regards,
William

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------