Re: Remote Access to Staff Desktops

["Himes, Daniel" <dhimes () LIBERTY EDU>]

For authentication do you mean Yubikey?

Everything I have heard about IronKey is that it is a very very very secure thumb drive

If your looking for more info about eather steve Gibson and leo laport did a pod cast on them at 
http://www.grc.com/securitynow.htm

Yubikey ep 143
IronKey ep 135

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Hugh 
Burley
Sent: Wednesday, February 18, 2009 12:54 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Remote Access to Staff Desktops

We have been using the CheckPoint IPSec VPN for a small number of users.  This solution requires too much 
administration to be broadly deployed and does not fully address EndPoint security. The CheckPoint SSL client did not 
impress our Technology Services Manager on first review, but the EndPoint Security package looks interesting.

I recently discovered that one of our users has installed a GoToMyPC client and is accessing his desktop from home. 
This solution is worth a look both as a threat and solution. It is not currently integrated with an EndPoint security 
package and seems quite expensive.

We are evaluating SSL VPN solutions with integrated end point security including disk encryption, firewall, AV, and 
port control. We are also trialing secure access to virtual desktops as a solution for our current off-site faculty.
Securing the EndPoint remains the most problematic part of this equation.

One thing I have been considering is distributing IronKey's USB solution with SSL VPN.  This would provide a relatively 
low cost and extremely secure remote access solution.

Has anyone else looked IronKey?



Hugh Burley
Thompson Rivers University
ITS - Senior Technology Coordinator
[cid:image001.png@01C9934E.83951ED0]
Information Security
BCCOL - 222D
250-852-6351

> > > Tim Lane <tlane () SCU EDU AU> 17/02/2009 8:30 pm >>>
Hi All,

We are receiving an increasing number of requests from staff to remotely access their desktops, for a variety of 
reasons.

I would be interested in hearing if any other Universities allow this, and if so how you are providing secure access, 
or if you have any thoughts/comments on the matter.

Thanks,

Tim

Tim Lane
Information Security Program Manager
IT&TS
Southern Cross University
Ph (02) 6620 3290
Mobile 0418 248 571