Security Basics mailing list archives

Re: Remote desktop access policy


From: "Kurt Buff" <kurt.buff () gmail com>
Date: Fri, 18 Jan 2008 16:18:04 -0800

On Jan 18, 2008 8:12 AM, The Security Community
<thesecuritycommunity () gmail com> wrote:
A PC in S3 ("standby") can Wake-On-LAN for an RDP connection.  Agreed,
that's not exactly being "turned off" but it's a lower power state
than being turned on.

Giving any user VPN access is a crapshoot.  If they could be given VPN
access _RESTRICTED_ to an RDP session to their desktop (or a Terminal
Server dedicated to VPN access), I think that would be ideal.

As noted in my first post, SSL-Explorer can do both of these things.

Kurt


Current thread: