RE: Secure / Encrypt Terminal Services

From: jason d. montgomery (jason@atgi.com)
Date: 11/26/02

  • Next message: David Vincent: "RE: Secure / Encrypt Terminal Services" 
    From: "jason d. montgomery" <jason@atgi.com>
To: <focus-ms@securityfocus.com>
Date: Mon, 25 Nov 2002 23:04:33 -0500

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    One solution we implemented involved setting up IPSec between a Cisco PIX at the enterprise to SafeNet Soft-Pk software (http://www.safenet-inc.com/) on the client side - then run terminal services through the tunnel.

    If you want to set something up a bit simpler than setting up IPSec, I just read an article on this very topic:

    Remote Management of Win2K Servers: Three Secure Solutions
    http://online.securityfocus.com/infocus/1629

    later,
    jason

    > -----BEGIN PGP SIGNED MESSAGE-----
    >
    > Does the community have an opinion on which is the best way to do this?
    > Can it be done via IP-Sec? Basically we have a machine (tripwire manager)
    > that will have access to all our networks. Due to politics (gotta love
    > security made insecure by politics) it must be remotely managed. The CIO
    > (god bless CIO's) has decided that we will use terminal services. Is
    > there a way to encrypt the traffic so it is not flying around the network
    > in clear text? Would IP-Sec be the recomended solution?
    >
    > Suggestions or links (or gentle shoves) to the information would be great.
    >
    > Thanks
    >
    >
    > -----BEGIN PGP SIGNATURE-----
    > Version: Hush 2.2 (Java)
    > Note: This signature can be verified at https://www.hushtools.com/verify
    >
    > wl0EARECAB0FAj3c67gWHG9obm9ub25vQGh1c2htYWlsLmNvbQAKCRAuXN+1lPsfqYk9
    > AJ4ndm/CgplNAjJHfTV5oSgPLfoYYwCfYUHT6Cta9Or1jTiu4KGfYokrjYg=
    > =2bx1
    > -----END PGP SIGNATURE-----
    >
    >
    >
    >
    > Get your free encrypted email at https://www.hushmail.com
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.6 (MingW32)
    Comment: For info see http://www.gnupg.org

    iD8DBQE94vLQv6RvkvBVJ4sRAkHBAKDQ9Yxr2JG+SXdpnoN2fWZ8XN6RpwCgr/xT
    FMWwbZoWcmnbqUN/HoBnIkE=
    =aCn9
    -----END PGP SIGNATURE-----