RE: terminal services

["Noonan, Wesley" <Wesley_Noonan () bmc com>]

I don't have time to track down the research for you, but I would point you
in the direction of comparing using a VPN as opposed to using TS. You would,
IMHO, be better served to use a VPN to establish the connection, then tunnel
TS inside that as opposed to pure TS.

To paraphrase Shrek (and I think someone else on this list), security is
like onions. There are lots of layers. 

HTH

Wes Noonan, MCSE/CCNA/CCDA/NNCSS/Security+
Senior QA Rep.
BMC Software, Inc.
(713) 918-2412
wnoonan () bmc com
http://www.bmc.com


> -----Original Message-----
> From: natfirewall () netscape net [mailto:natfirewall () netscape net]
> Sent: Tuesday, January 28, 2003 14:00
> To: firewall-wizards () honor icsalabs com
> Subject: [fw-wiz] terminal services
>
> Greetings,
>
> I am being asked to open port 3389 on our Corporate firewall and direct
> incoming traffic on that port to a specific IP on our internal network.
> Being the paranoid that I am, I do not want to do this but I need better
> reasons/ammunition other than saying "it would be bad".  I am looking for
> pointers to information hopefully in support of my fear of M$ security.
> Also,  the more recent the information the better.
>
> Not being close minded,  I would also be interested in seeing any
> information which would make me feel warm and fuzzy about opening the
> port.
>
>
> TIA
>
>
> __________________________________________________________________
> The NEW Netscape 7.0 browser is now available. Upgrade now!
> http://channels.netscape.com/ns/browsers/download.jsp
>
> Get your own FREE, personal Netscape Mail account today at
> http://webmail.netscape.com/
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () honor icsalabs com
> http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards