Re: Remote Access - no VPN

[Tom Jedrzejewicz <tomjedrz@xxxxxxxxxxxxxx>]

On Wed, Jun 3, 2009 at 8:58 AM, Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx> wrote:
> All,
>
> What do you think of Remote Desktop access into our domain with no VPN?
> This would mean the domain user/password is the security.

I wouldn't do it .. I am not sure about how secure RDP is by itself,
but I would not want to expose the client directly on the internet.  I
would either use the TS Gateway (as Lukas suggests) or implement a VPN
of some sort.  There are lots of options for VPN; I happen to like the
"Astaro Security Gateway" firewalls.

As an aside ... don't confuse the means of authentication (AD
user/password) with the mechanism of securing the data (VPN, SSL, SSH,
etc.).  Lots of very secure configurations can use the AD
user/password to authenticate.

---------
Tom Jedrzejewicz
tomjedrz@xxxxxxxxxxxxxx