Re: Securing management access?

If you want just to manage the server remotely you dont need a VPN. A VPN is set to simulate a private network connection (like the LAN on your organization) using a public connection like internet, it comes at hand when you want to several machines connected by a WAN to, for example, logon to a same domain. I dont think that is your case.

The best way I think in your case is implementing a firewall (like ISA Server 2006) with all the rules set to only allow the traffic that you need; and use remote desktop to connect to your server using a public IP. If you have several servers but only one public IP, ISA can really help you there: you can set the firewall to listen on different ports for each server connection.

Hope it helps

Cheers



--
augusto alvarez | it pro | southworks
http://staff.southworks.net/aalvarez


"JBJBJB" <JBJBJB@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:793DFDED-308E-47E1-9657-2801848E60D8@xxxxxxxxxxxxxxxx
Hello Augusto,

Thanks for replying, I'll explain in a bit more detail.
I would like to manage a server that shall be hosted in a hosting center, so
I do not have physical access to that server. Now I wonder what
infrastructure I need (firewall? VPN?...) and which settings I should use in
order to safely manage this server from our office.

I was thinking of some scenario's:
A. Setup a VPN between our office and the server and only allow management
traffic to that server from the VPN
But this might be complex to setup (I won't know exactly how to do this).

B. Just use IP filtering to limit the source for management
This might be too simple and easy to bypass for hackers.

C. Just use Remote Desktop protocol (RDP)
Perhaps RDP traffic is encrypted by nature and using it to manage a remote
server outside our network might be sufficient. But I don't believe so just
yet, although I can't tell the exact risks of this solution.

I hope this information is sufficient for you to get a picture of what I'm
looking for, I hope you can help me find the best and most secure solution.

TIA,
Jeroen
"Augusto Alvarez" wrote:

Its not really clear what you need to do on your network. You want to
configure a VPN or do you want to block any access from an external network
to your server?


--
augusto alvarez | it pro | southworks
http://staff.southworks.net/aalvarez

"JBJBJB" <JBJBJB@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:78FC67BB-1245-45B9-A61E-FBC0DE22B418@xxxxxxxxxxxxxxxx
>I would very much like to know how I can configure the firewall or >network
> settings of a Windows 2003 server in a way that it can only be managed > and
> accessed from our office. Could I use IP filtering for it and would it
> suffice? Perhaps create a VPN between our office and the servers, but I
> can't
> find any article on how to set this up properly.
>
> Does anyone have guideline articles on how to configure this? Perhaps > some
> links to articles on how to set this up
>
> TIA,
> Jeroen



.

Relevant Pages

  • Re: Remote Client Configuration
    ... > remote computer to SBS 2003 domain via VPN connection after the remote ... > connection when user logon to the remote computer. ... I dont think that the Network Configuration website would work to connect to ... "The Small Business Server Network Configuration Wizard ...
    (microsoft.public.windows.server.sbs)
  • Re: Connection Wizard - VPN Problem
    ... VPN Server Name The Routing and Remote Access service enables your server to be a virtual private network server. ... I am getting an error with the "connect to sbs" (I think it's the connection ...
    (microsoft.public.windows.server.sbs)
  • Re: Outgoing POP3 email missing/lost/not received
    ... Funny thing is that I have had this ISP for 8 years and it has always been ... It looks like when you last ran CEICW, you set the ISP's mail server to: ... Internet Connection Wizard. ... After the wizard completes, the following network connection ...
    (microsoft.public.windows.server.sbs)
  • Re: Outgoing POP3 email missing/lost/not received
    ... ISP's mail server instead of the domain name on the ... SUMMARY OF SETTINGS FOR CONFIGURE E-MAIL AND INTERNET ... Internet Connection Wizard. ... After the wizard completes, the following network connection ...
    (microsoft.public.windows.server.sbs)
  • RE: Problems with Permissions
    ... And SBS server is only take ... the role of an internal server. ... they are all configured to connected to internal network. ... g. Run the Configure Email and Internet Connection Wizard on SBS server. ...
    (microsoft.public.windows.server.sbs)