Re: Remote Access - no VPN

["Jeff Crosby" <jlcrosby@xxxxxxxxxxxxxxxx>]

I do NOT want passwords in the clear.  I would put a kabosh to that.

--
Jeff Crosby
UniPro FoodService/Dilgard
P.O. Box 13369
Ft. Wayne, IN 46868-3369
260-422-7531
www.dilgardfoods.com

The opinions expressed are my own and not necessarily the opinion of my
company.  Unless I say so.


> -----Original Message-----
> From: pctech-bounces@xxxxxxxxxxxx [mailto:pctech-bounces@xxxxxxxxxxxx] On
> Behalf Of Tom Jedrzejewicz
> Sent: Wednesday, June 03, 2009 1:40 PM
> To: PC Technical Discussion for iSeries Users
> Subject: Re: [PCTECH] Remote Access - no VPN
>
> On Wed, Jun 3, 2009 at 8:58 AM, Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx>
> wrote:
> > All,
> >
> > What do you think of Remote Desktop access into our domain with no VPN?
> > This would mean the domain user/password is the security.
>
> I wouldn't do it .. I am not sure about how secure RDP is by itself,
> but I would not want to expose the client directly on the internet.  I
> would either use the TS Gateway (as Lukas suggests) or implement a VPN
> of some sort.  There are lots of options for VPN; I happen to like the
> "Astaro Security Gateway" firewalls.
>
> As an aside ... don't confuse the means of authentication (AD
> user/password) with the mechanism of securing the data (VPN, SSL, SSH,
> etc.).  Lots of very secure configurations can use the AD
> user/password to authenticate.
>
> ---------
> Tom Jedrzejewicz
> tomjedrz@xxxxxxxxxxxxxx
> --
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing
list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.