Sarbanes Oxley - is RDP OK?

[Boe]

Hello,

If I use the a firewall and open up just port 3389 from specfic IPs and use
RDP from those IPs to get to a waiting PC, am I OK or am I required to use a
secured VPN client first?

 

[Sooner Al [MVP]]

Hello,

If I use the a firewall and open up just port 3389 from specfic IPs and
use RDP from those IPs to get to a waiting PC, am I OK or am I required to
use a secured VPN client first?

If you use a *STRONG* password in general you should be safe. With that said
for home users I always recommend running Remote Desktop through a Secure
Shell (SSH) tunnel because...

1. You can use a private/public key pair protected with a password for
strong authentication versus a password only (strong or otherwise).
2. You can access more than one PC behind a router or firewall by only
opening one port versus multiple ports.

Corporate users should consult their network admins about this. More than
likely a VPN will be required to access the corporate network first before
connecting with Remote Desktop.

The bottom line is a VPN or SSH tunnel is NOT required but it is good to
use, IMHO...

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a question
http://support.microsoft.com/KB/555375