Secure Terminal Services over the web

Question

I'd need to make Terminal Services available over the web, what is the best (secure) way for me to do this?

Thanks S

score 3 · Accepted Answer · answered Nov 01 '09 at 21:19

3

First, I'd employ a secured connection such as a VPN of some sort (OpenVPN, PPTP, Cisco, ssh-tunneling, etc).

As long as you're running RDP v6 or higher, the connection is encrypted - but authentication may not be (if I understand the documentation properly).

answered Nov 01 '09 at 21:19

warren

18,369
23
84
135

It is as encrypted as the connection, but not more so. – Satanicpuppy Nov 01 '09 at 21:35
before v6 it was completely unencrypted (http://en.wikipedia.org/wiki/Remote_Desktop_Protocol). With v6, I do not know if you can turn it off. – warren Nov 02 '09 at 04:59
There is also a significant man-in-the-middle attack vector, which is why additional security is reccomended. – Roy Nov 02 '09 at 10:47
that was addressed with the update to v6, from my understanding – warren Nov 02 '09 at 11:22

score 2 · Answer 2 · answered Nov 01 '09 at 23:00

2

Look into the Remote Desktop Gateway service (present in Windows 2008 and higher) - it will tunnel RDP traffic inside a SSL stream, abstracting the terminal server from the client. Much the same way that Citrix Secure Gateway did.

answered Nov 01 '09 at 23:00

Trondh

4,201
24
27

score 0 · Answer 3 · answered Nov 01 '09 at 21:16

0

Citrix Access Gateway or a simple ssh tunnel

answered Nov 01 '09 at 21:16

Roy

4,376
4
36
53

Secure Terminal Services over the web

3 Answers3