Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'd need to make Terminal Services available over the web, what is the best (secure) way for me to do this?

Thanks S

share|improve this question

3 Answers 3

up vote 3 down vote accepted

First, I'd employ a secured connection such as a VPN of some sort (OpenVPN, PPTP, Cisco, ssh-tunneling, etc).

As long as you're running RDP v6 or higher, the connection is encrypted - but authentication may not be (if I understand the documentation properly).

share|improve this answer
    
It is as encrypted as the connection, but not more so. –  Satanicpuppy Nov 1 '09 at 21:35
    
before v6 it was completely unencrypted (en.wikipedia.org/wiki/Remote_Desktop_Protocol). With v6, I do not know if you can turn it off. –  warren Nov 2 '09 at 4:59
    
There is also a significant man-in-the-middle attack vector, which is why additional security is reccomended. –  Roy Nov 2 '09 at 10:47
    
that was addressed with the update to v6, from my understanding –  warren Nov 2 '09 at 11:22

Look into the Remote Desktop Gateway service (present in Windows 2008 and higher) - it will tunnel RDP traffic inside a SSL stream, abstracting the terminal server from the client. Much the same way that Citrix Secure Gateway did.

share|improve this answer

Citrix Access Gateway or a simple ssh tunnel

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.