RE: Terminal Services over VPN

From: Geoffrey Shorter (geoffreyshorter_at_hotmail.com)
Date: 08/15/03

  • Next message: Glen Seimetz: "Re: [Re: Security Certifications. Help needed]" 
    To: security-basics@securityfocus.com
Date: Thu, 14 Aug 2003 19:54:13 -0400

    David:

    We use Terminal Services over a Cisco VPN and have great success with it. I
    am working from home using that right now. (I know you specified Microsoft
    VPN server in your question, but I thought I'd answer anyway...)

    We have some remote users who, when they come into our main office, complain
    about the slowness of one of our main applications, because they are used to
    using Terminal Services remotely and it is as fast or faster than running a
    fat client in the office. (Sad, but true.)

    Terminal Services will encrypt the sessions if you set it to do so on the
    server side. There's a checkbox, offhand don't remember where....

    There are other security considerations when running Terminal Server --
    don't use the default port, enable network root lockout, etc. -- numerous
    books address those issues including the Hacking series of books....
    Certainly I would not call it exactly secure out of the box... :)

    geof

    -----Original Message-----
    From: David Y. Ng [mailto:dng@cmhsweb.org]
    Sent: Thursday, August 14, 2003 3:43 PM
    To: security-basics@securityfocus.com
    Subject: Terminal Services over VPN

    Has anyone used Terminal Services over Microsoft's VPN server? I need to run
    some program off the server and when I used just the VPN, it was terribly
    slow. The solution on paper is to run the program off Terminal Services and
    just let it pass through the VPN which could be faster, supposedly.

    Any experiences with this? Is Terminal Services in itself secure? I read
    there's some form of encryption also but is it comparable to VPN in a way?

    _________________________________________________________________
    The new MSN 8: smart spam protection and 2 months FREE*
    http://join.msn.com/?page=features/junkmail

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

  • Next message: Glen Seimetz: "Re: [Re: Security Certifications. Help needed]"

    Relevant Pages

    • Re: Terminal Services
      ... RWW is included in Premium and Standard and is similar to terminal services, ... > Am I correct in my thougths that no matter if we ran SBS or Windows Server ... >> Web Wokplace or VPN and do what you wish. ...
      (microsoft.public.windows.server.sbs)
    • Re: Which is the best for allowing users to work from home? Terminal Services / Remote Access?
      ... I had pretty much ruled out Remote Control of individual PC's. ... terminal services or VPN is the way to go. ... With 2003 Terminal Services, I suppose I'd be looking at an additional ... Server 2003 box with terminal service licenses which sounds like it ...
      (microsoft.public.windows.server.general)
    • Re: need help setting up local and remote server access
      ... If you want remote access then you have a couple of options: RDP or VPN (or ... recommended that you install Terminal Services on a Domain Controller ... Are you going to run Exchange Server 2003? ... I have Windows server 2003 active directory domain created and will have 8 ...
      (microsoft.public.windows.server.active_directory)
    • Re: Terminal Services
      ... Terminal Services should not run on a Domain Controller and has been ... Windows Member Server joined to a SBS running TS and and login thru Remote ... Web Wokplace or VPN and do what you wish. ...
      (microsoft.public.windows.server.sbs)
    • Re: TS Security Issue
      ... secure network that is somehow your problem? ... Your Terminal Services Security Website ... to have a VPN connection before they're allowed to TS into the server .. ...
      (microsoft.public.windows.terminal_services)
    • Quantcast