Secure RDP connection from outside the network

Secure RDP connection from outside the network
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Secure RDP connection from outside the network Matt 07-12-2006
Posted by Matt on July 12, 2006, 6:23 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I have also posted this question in the Windows Server group, but I am
not sure where it is a better fit. I am still fairly new to the
networking world so please be gentle. I need to setup a secure
connection to a Windows 2003 Server using RDP from outside the network.
The server is behind a firewall that I am learning was not configured
as securely as it should be. I am also fairly new to the network
security world, as well, so the same level of gentleness is
appreciated. I have been researching this topic for a few days and I
have found out that there are more than a few ways to skin this cat.
Like most people, I am looking for the cheapest or freeest solution but
do not want to compromise security.

I thank you for any suggestions you can offer.


Posted by Volker Birk on July 13, 2006, 10:22 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> I need to setup a secure
> connection to a Windows 2003 Server using RDP from outside the network.

Maybe, then you should implement an encrypted VPN or at least an SSH
tunnel.

Yours,
VB.
--
"Alles gehört allen, nur meins gehört mir."

Patricia Bednar über Kommunismus

Posted by Leythos on July 13, 2006, 2:46 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
matthewsatkins@gmail.com says...
> I have also posted this question in the Windows Server group, but I am
> not sure where it is a better fit. I am still fairly new to the
> networking world so please be gentle. I need to setup a secure
> connection to a Windows 2003 Server using RDP from outside the network.
> The server is behind a firewall that I am learning was not configured
> as securely as it should be. I am also fairly new to the network
> security world, as well, so the same level of gentleness is
> appreciated. I have been researching this topic for a few days and I
> have found out that there are more than a few ways to skin this cat.
> Like most people, I am looking for the cheapest or freeest solution but
> do not want to compromise security.
>
> I thank you for any suggestions you can offer.

Are you trying to access a W2003 server from another network or from
another office?

You mention Sonic, why not setup a site-site IPSec tunnel between the
locations and then set rules to only allow traffic that is required.

If you are doing a client/laptop to the W2003 server, then do the same
as above, setup IPSec/PPTP client VPN into the Sonic and then rules to
allow traffic through the VPN.

Don't open the RPC ports for any reason to the world.

--

spam999free@rrohio.com
remove 999 in order to email me

Posted by Matt on July 14, 2006, 9:18 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Leythos wrote:

> Are you trying to access a W2003 server from another network or from
> another office?

This access is actually for a software vendor that is setting up their
application on the new server. They are not part of my network in any
way.

> You mention Sonic, why not setup a site-site IPSec tunnel between the
> locations and then set rules to only allow traffic that is required.

See above.

> If you are doing a client/laptop to the W2003 server, then do the same
> as above, setup IPSec/PPTP client VPN into the Sonic and then rules to
> allow traffic through the VPN.

We already tried installing SonicWALL's VPN but I am not comfortable
with that solution. They are wanting to use one janky laptop that has
a few other VPN clients installed on it. The clients are conflicting
with one another, and quite frankly, I don't feel safe with the fact
that they will be supporting this new application from an old laptop
that just needed to be rebuilt. Their Network Engineer said that the
easiest and most reliable way would be RDP.

> Don't open the RPC ports for any reason to the world.

Are there any other viable solutions besides VPN?


Thanks for the reply.


Posted by Sebastian Gottschalk on July 14, 2006, 11:50 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Matt wrote:
> Their Network Engineer said that the easiest and most reliable way
> would be RDP.

It he's pretty right. A fixed port, traverses NAT and pretty secure
encryption.

>> Don't open the RPC ports for any reason to the world.

Why RPC? This isn't needed in any such scenario.

Similar ThreadsPosted
Secure Network Devices June 19, 2007, 7:22 am
Network Restructuring (Network Design and Equipment) May 16, 2006, 9:38 am
Extremely slow "broadband" connection January 2, 2005, 3:06 pm
connection logger advice needed February 2, 2005, 5:42 pm
ADSL connection dropping randomly April 18, 2005, 2:49 pm
ftp to ibiblio results in connection to Google as well August 22, 2007, 11:00 am
What Windows process initiate connection to other Port 139? July 27, 2004, 3:37 pm
When You Hear The Heavy Accent & The Poor Phone Connection... HANG UP!!! _____ ueaGP7rAId2 March 27, 2004, 6:21 pm
SSL Server authentication, SSL client authentication, SSL connection and SSL session August 14, 2006, 1:05 pm
Network Setup Help!!! September 3, 2005, 9:50 pm

The site map in XML format XML site map

Contact Us | Privacy Policy