Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a Windows 2008 Amazon EC2 instance with a public facing web site and a back office 'Admin' site. Currently the back office site is secured with username / password, but ideally I'd like to add an additional layer of security such as access only via VPN.

As far as I can tell the Amazon VPC VPN solution is hardware based. Users accessing the back office site will be doing so from different geographic locations and from dynamic IPs. This seems to mean that Amazon VPC VPN or security based on client IP is out.

Would a software VPN solution be possible. Can anyone recommend one? I also looked into setting up an SSH server, using SSH tunnelling + port forwarding, and running the Admin site on a port > 80. Would anyone recommend that as an option?

On the other hand, am I being too cautious, as long as the admin site login is secure and user's passwords are strong?

share|improve this question
    
Is the admin site web based? –  John Virgolino Dec 14 '11 at 1:26
add comment

1 Answer

Windows Routing & Remote Access is more than capable of creating a VPN tunnel... just avoid PPTP imho. I am not 100% certain how the EC2 firewall rules can be configured to allow all packet types necessary to allow VPN... iirc it only lets you configure TCP/UDP... and you need AH, ESP and ISAKMP in addition to the port 500 UDP.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.