Windows 2003 server and VPN: Security(?)



Hi, at work we would like to move towards remote access to employees via a
VPN.

Now, our admin seems reluctant citing security as an issue which is fair
enough.

Given that our employees are on static IP addresses external and our network
is behind a firewall surely we could punch a single hole in the fireall and
give access to *only* that IP address? Once through the firewall, the user
would still have the Windows 2003 security so we would have at least two
levels of security.

How safe is setting up a VPN network under Windows 2003?

TIA
Marcus


.



Relevant Pages

  • Re: Access to network drives for home and roaming users
    ... All the VPN does is to add a security layer to the remote access, ... Use Terminal Services with remote access. ... have a windows 2003 R2 network with an internal and perimeter network, ...
    (microsoft.public.inetserver.iis.security)
  • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks
    ... This set of steps is redundant in many places, and it's also enormously expensive, since you're using no less than three different expensive bits of networking hardware (AP, PIX, VPN Concentrator), in addition to a bunch of x86 server hardware, windows server licenses, and at least one ISA license. ... Your computers necessarily don't have full access to your network infrastructure when they aren't logged on, so GPOs, software updates, etc can't be applied at the times you want them to be applied. ... Turning on, enabling, and implementing every possible security setting and device you think of is not defence in depth, and will probably only have two effects - your users won't use your wireless network, and you'll burn so much cash you won't have any left to spend on *useful* security measures. ...
    (Full-Disclosure)
  • Bush junta loses again
    ... They insisted on doing away with many civil service protections ... After a lot of pulling and hauling, the Bushitters prevailed and employees ... -- Lost on social security ... deploying workers and in negotiating with unions if they are to enhance ...
    (alt.politics)
  • Re: Firewall advice required please
    ... 2./ How do you provide "SECURE" access without a VPN? ... suggesting you are achieving as-good-as security using a standard SSL, ... > and air-gap is the only product we carry. ... > no other firewall can touch. ...
    (comp.security.firewalls)
  • Re: Basic Windows Security Question
    ... > Suppose you have a small company of less than 100 employees. ... in that thumb drives are currently maxing in the 1GB range, ... organizations security policy. ...
    (Security-Basics)