Terminal Server sessions with separate VPN Connections?

[Tim Smith]

microsoft.public.win2000.termserv.clients

Hi,

I not a network person, but a manager who wishes to understand the
options for setting up a secure VPN to remote sites. Our current
situation is as follows:

We have a separate room with an isolated network. In there the PCs
have VPN connections to our remote site networks.
This prevents anything from attacking our main network.

our main network | connection network --vpn-- remote site

However I want everyone to be able to access the remote site
(securely) from their desktop. Is it feasible to have the following:

desktop on main net --termserv-- term server on conn net --vpn--
remote site

If we have a firewall on the connection network letting ONLY term
service port to our main network will that protect our main network?

Can the terminal server simultaneous sessions allow different vpn
connections to different remote sites?

thanks!

Tim

 

[Matthew Harris [MVP]]

answers are inline...

-----Original Message-----
If we have a firewall on the connection network letting ONLY term
service port to our main network will that protect our

main network?

It should. You can also force the firewall to only allow
connections from certain IP addresses. Additionally, you
can force 128-bit encryption on the terminal services data
stream to further encrypt the data, if you are worried
about people sniffing your stuff.

Can the terminal server simultaneous sessions allow different vpn
connections to different remote sites?

thanks!

Tim

This might be a little iffy. When you establish a VPn
session, your default gateway is changed to be the VPN, so
having two different connections to the same computer
won't pwork the way you are trying to. The system won't
be able to tell which VPN to use.

-M

 

[Goncharuk]

Can the terminal server simultaneous sessions allow different vpn

connections to different remote sites?

I think that it is impossible with the terminal server.
Use other remote control program, for example Anyplace Control
(http://www.anyplace-control.com)