RE: [FW1] Microsoft Terminal Server Concerns

[Thomas . Poole]

Title: RE: [FW1] Microsoft Terminial Server

I probably would have spent more time answering this question if the author had spent more time explaining the configuration, along with the proposed entry of Terminal Server into the environment. The obvious answer is, if the Terminal Server is on the DMZ, then why in the heck would you do it? You are opening a wide hole to segmented servers. If the terminal server is on the internal net, then you open every host not being protected by the fw.

 

Why not let the firewall do it's job and do some sort of encryption?

 

Thomas Poole

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 07, 2000 5:16 PM
To: ''Fw-1-Mailinglist (E-mail)'
Subject: RE: [FW1] Microsoft Terminal Server Concerns

I hate to make assumptions, but can I assume that since no one responded to this, that nobody has any concerns???

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tucker, Greg
Sent: Wednesday, July 05, 2000 1:58 PM
To: ''Fw-1-Mailinglist (E-mail)'
Subject: [FW1] Microsoft Terminal Server Concerns

I've had a request to allow dial-up access to Microsoft Terminal Server.

 

Can anyone list concerns, or point me to a sight the discusses what security issues to be concerned about when allowing this capability?

 

Thanks.