RE: PCanywhere: security of it and operation over DSL/cable modems

From: Eric S. Wehr (eswehr@hostarica.com)
Date: 07/23/02


From: "Eric S. Wehr" <eswehr@hostarica.com>
To: <securitybasics@plumlee.org>, <security-basics@securityfocus.com>
Date: Tue, 23 Jul 2002 12:23:23 -0400

Potential Solution is to use the VPN, use a remote control program
(pcanywhere, controlit from ca (old RCO product renamed) or term
serv(has to connect to 2K server)). This way you will not only have a
VPN encrypted connection but you are not opening up a desktop through
the firewall. Once connected on a VPN, you can connect to any internal
boxes with remote control software and do the work as if in the office.

As for speed over broadband. You need a consistent connection speed.
DSL is great for this, but Cable modem speeds vary to much and can cause
sluggishness and frustration.

Best of luck.

Eric

-----Original Message-----
From: Klepinger, Aaron [mailto:Aaron.Klepinger@CompuCredit.com]
Sent: Tuesday, July 23, 2002 9:01 AM
To: 'securitybasics@plumlee.org'; security-basics@securityfocus.com
Subject: RE: PCanywhere: security of it and operation over DSL/cable
modems

i've often heard Remote Admin mentioned on some lists as a good product
(fast & secure), but I can't vouch for it myself. it's cheap, too
($35/2pcs)

http://www.radmin.com/

thx,
aaron

-----Original Message-----
From: securitybasics@plumlee.org [mailto:securitybasics@plumlee.org]
Sent: Monday, July 22, 2002 4:35 PM
To: security-basics@securityfocus.com
Subject: PCanywhere: security of it and operation over DSL/cable modems

We have a workstation at the office that needs to allow a user remote
access for running software on the workstation. I don't think a VPN
will
work because the user MUST run the software on this machine, as if he
was
seated at it. I'm looking at gotomypc.com and pcanywhere. I don't feel

comfortable using gotomypc.com as this is proprietary company
information
and I don't trust someone else having the access information for the
workstation that has the info on it.

My questions are as follows:
1. Has anyone got experience with the security of PCanywhere running
over
a DSL/cable modem connection? What should I watch out for? From what I
understand, I can use HTTPS as one of the options for the
connection. Anyone know the encryption level? Are all parts of the
transactions secured with encryption?
2. How does the software work if it's over a broadband connection? My
internal IPs aren't valid for routing. How does the software know a
connection is being initiated?
3. Any better solutions come to mind? I'd rather have a PITA setup
that's
secure than a simple one that's not.
4. What security measures should I implement on the users PC to make
sure
that it's secure as well? I won't have physical access to it but for
the
initial setup.

I'll be interested in seeing if this gets posted at all due to the
recent
acquisition of securityfocus by Symantec. Can't bite the hand that
feeds
you, I guess.

Many thanks for any help. Long time reader (well, several months at
least), first time poster.

==================================================
This message contains PRIVILEGED and CONFIDENTIAL
information that is intended only for use by the named recipient. If you
are not the named recipient, any disclosure, dissemination, or action
based on the contents of this message is prohibited. In such case please
notify us and destroy and delete all copies of this transmission. Thank
you. ==================================================



Relevant Pages

  • Re: Question about PC Anywere version 11
    ... connection The latter option would always run at dialup speed. ... Sensitive data moving over an internet connection should be ... One other thing to keep in mind is that PCAnywhere and its relatives are ... remote control software is a poor choice for the purpose. ...
    (sci.med.transcription)
  • Re: HELP! needed with Watchguard Firebox II
    ... > possible to use PcAnywhere via the web through a Watchguard Firebox II? ... Setup a VPN ... connection, logon to the connection, then use PCAnywhere through the VPN ...
    (comp.security.firewalls)
  • Re: Connecting to my Home Office Computer
    ... > From a separate computer, what procedure do I follow to get into my ... What you have done is set up a VPN endpoint to receive incoming VPN ... The only thing you will be able to do with a VPN connection is to use any ... It will not, for instance, enable you to take remote control of your XP PC. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Forward to an Internal - SBS2003 STD
    ... do you mean you can not find the "Network Connection" in the ... it should have 4 options: Server Local Area ... |> I understand you want to setup PcAnywhere. ... |> 3) What direction of the ports that it needs? ...
    (microsoft.public.windows.server.sbs)
  • Re: dialup connection experience
    ... win/xp workstation using built in dialup server feature, ... some drawback opposed to some other third-party connection methods ... had excelent experience with pcanywhere 4.5, it was extremely simple, ... In general - my experience with the built-in Remote Desktop (for Windows XP ...
    (microsoft.public.windowsxp.work_remotely)