Remote Access

Many built-in administration tools are disabled when a server is properly secured, so other tools are necessary for remote administration. However, there are still security issues to consider in configuring these tools, most notably, encryption of data between client and host, and controlling who is allowed remote access.

PCAnywhere

PCAnywhere is a remote control program that has a number of features. Most often, it is used to log into workstations to troubleshoot problems, or to transfer files or to work remotely on a specific workstation. PCAnywhere can be purchased through Symantec.

• Securely configuring PCAnywhere 10.0

Basic configuration steps for PCAnywhere 10.0:

• Require strong passwords
• Restrict access by ip address or address range
• Select encryption type (symmetric encryption is recommended)
• Limit the number of login attempts
• Limit the amount of time available to complete a login
• Use the Remote Access Perimeter Scanner to identify unsecured pcAnywhere hosts
• Use Integrity checking to disable modified/compromised installations of pcAnywhere
• Use logging to record the files and programs accessed during a remote control session

A newer version, PCAnywhere 11.0, provides support for pki and symmetric encryption.

VNC

VNC is a remote control program which allows a user to view and interact with a remote computer. VNC is open source and platform independent, so you can use VNC to view a Linux machine from a Windows machine. The viewer is small enough to fit on a floppy disk.

To secure VNC, tunnel VNC through SSH.

Please let us know if there are other applications that you've found useful for remote access and would like to see listed here.