Re: PC Anywhere and security

I recommend requiring the use of a VPN by all vendors, then using the
remote access software over the VPN, you can use VPN policies or IPSec
policies to prevent the remote user from accessing anything but that
box.

PCAnywhere is not insecure, but a VPN is secure, PCA can suffer from
MITM attacks, possible compromise of the client workstation allowing
an attacker to use it to gain access to your network. (Think Remote
Exploit + Reverse VNC + PCA)

- SaP -

On 2/21/06, martin samson <martcci@xxxxxxxxxxx> wrote:
Hi group,

We used to have PC Anywhere (long long time ago...in the 80's) as a remote
support system. We've moved away from it and now a supplier wants to connect
to his box with it. What position should the server be to be secure
(network, DMZ, special zone)?

Can you give me an idea on how secure are the last versions of PC Anywhere?

Can a PC Anywhere connection give them access to our network even if the
user credential limits the rights to specific directories on his machine ???

Thanks!

Marty



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • Re: Openvpn and ssh
    ... You can also look at the SSL-Explorer (Open Source SSL VPN) if you ... > education and the case study affords you unmatched consulting experience. ... > Computer Emergency Response Teams, ...
    (Security-Basics)
  • RE: PC Anywhere and security
    ... How do you share VPN with vendors when certs/keys are involved? ... Norwich University program offers unparalleled Infosec management ... education and the case study affords you unmatched consulting ... Planning, Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • Re: Deploying SSL-based VPNs
    ... Most hardware VPN gateways use IPSec ... Infosec management ... Tailor your education to your own professional goals ... Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • Re: How can I deny VPN access based on Virus DAT
    ... For Cisco NAC, you establish the VPN, but if you don't have everything ... > The Norwich University program offers unparalleled Infosec management ... > education and the case study affords you unmatched consulting experience. ... > Computer Emergency Response Teams, ...
    (Security-Basics)
  • Re: Remote Access and ISA Server in SBS 2003?
    ... I am glad to hear the Remote Access Wizard is working fine now. ... there is no difference in VPN between SBS 4.5 and SBS ... Error Message: VPN Connection Error 800: Unable to Establish Connection ... the external NIC of the SBS Server. ...
    (microsoft.public.windows.server.sbs)