thegrassisgreener Posted October 8, 2007 Posted October 8, 2007 Which ways do people give staff access from home: ..Ternminal Server ..VPN ..VLE Which ways do you? how do you go about it.....
localzuk Posted October 8, 2007 Posted October 8, 2007 Only 2 people have access from home - me and my boss (the bursar). This is via RDP into our proxy server and then from there to our own machines. We don't offer this as a general access option, as it would be a nightmare - what happens if people can't get on? I would get calls on my mobile all night long.
localzuk Posted October 8, 2007 Posted October 8, 2007 Oh. but we do have a VLE, which no-one uses. And we have Learning Gateway, which no-one uses. And email, which hardly anyone uses...
thegrassisgreener Posted October 8, 2007 Author Posted October 8, 2007 Terminal Server + WebDav + Web Email + VLE How secure is your Terminal Server? How is it attatched to your network???
TechMonkey Posted October 8, 2007 Posted October 8, 2007 We have WebDav & webmail for staff. RDP stylee for me onto my machine and the boss lives within our cloud.
mrforgetful Posted October 8, 2007 Posted October 8, 2007 I am currently looking into enabling RDP for a couple of staff members, just trying to figure out how to add the rule in my PIX. Other staff can currently check email (Outlook WebAccess), access the public area (WebDAV) and the VLE (Talmos).
Geoff Posted October 8, 2007 Posted October 8, 2007 How secure is your Terminal Server? I'm using strong SSL based login/sessions. I'd like to enforce a strong password policy, but currently can't due to PEBCAK reasons. How is it attatched to your network??? Internet <-> LEA Firewall <-> LEA Reverse Proxy <-> School Firewall/IDS <-> Load Balancer <-> 5x Citrix Terminal Servers.
GrumbleDook Posted October 8, 2007 Posted October 8, 2007 Terminal Server over RDP at the moment ... but will be TS accesses over a secure browser using Secure Global Desktop. It will be demonstrated at the conference if you want a look.
spc-rocket Posted October 8, 2007 Posted October 8, 2007 - Terminal Servies for SLT only at the moment - 2X Application Server (to publish the apps - appears to them as local apps and seamless connects back end to TS box. - Outlook web access for email (this is to all staff + students) - Easylink (WebDAV) for My Docs + Shared Folders (this is to all staff + students) - VLE (this is to all staff + students) Ash.
ZeroHour Posted October 8, 2007 Posted October 8, 2007 VPN -> TS (with intranet)/WEBDAV/SOPHOS UPDATES/OWA all powered by my extranet website HTTPS external -> OMA/OWA/Activesync
MkII Posted October 8, 2007 Posted October 8, 2007 RDP for techs, VPN for selected staff, webmail & VLE for everyone else - staff and kids. All https. Head doesn't want webdav.
webman Posted October 8, 2007 Posted October 8, 2007 SSH for me. RM Easylink (WebDAV) for everyone - work areas HTTP to email. We're working on RDP for SIMS.
maniac Posted October 9, 2007 Posted October 9, 2007 We use SSL explorer to provide a VPN connection to our remote server, then use the RDP plugin to connect to their own PC via remote desktop. I set up an individual shortcut for each user that has been given remote access to make this easy. The advantage of this is because users are connecting to their own machines, they get access to their local printer if they want to print stuf ready for the next day, and also acces to files that may be on their C:\ and locally installed applications such as PAT. It also saves a packet on a dedicated terminal server which are pricy items to purchase. We also have a VLE which is in its infantcy, exchange web access for all staff, and all staff can access their home folder and the public areas also using SSL explorer without using the VPN functions. Staff can also access e-portal from home. (although it's a bit slow) Mike.
Ric_ Posted October 9, 2007 Posted October 9, 2007 Do people have any support policies in place for their 'out of hours' access methods?
maniac Posted October 9, 2007 Posted October 9, 2007 Tell us the next day and we'll do our best to help. It's never been asked of us, so we don't provide out of hours support. I have made a trip once during school time to a member of staffs house to sort out their connection so they could access it, but apart from that we don't really support the remote access, it's more of a 'bonus' at the moment. I think that will change soon though, particulalry as the first holiday period is coming up since people have been introduced to it. Mike.
Geoff Posted October 9, 2007 Posted October 9, 2007 Do people have any support policies in place for their 'out of hours' access methods? There is none. It's a moot point anyway, because it's usually something within the LEA that goes wrong, and they only do workday/school hours support anyway.
Oops_my_bad Posted October 9, 2007 Posted October 9, 2007 We have a sort of "caveat emptor" that remote access is a "user managed service" meaning that they have to provide the ADSL. 99.9% of faults with remote access will be because of user equipment/hardware
zag Posted October 10, 2007 Posted October 10, 2007 VPN for the more advanced users. VLE/Sharepoint for the kids Webmail for all VPN/Remote desktop for me.
mrforgetful Posted October 10, 2007 Posted October 10, 2007 If they have a problem and report it to me I'll do my best to think some advice up, but really it's not something that's covered. I was asked to go help out the Bursar's mate once with his broadband, told him no unless he did my finances!
GrumbleDook Posted October 10, 2007 Posted October 10, 2007 Out of hours ... no support really but that is mainly due to it just working. The main problem is stopping staff using it so we can do maintenance on the servers after school (or at weekends if I am bored)
mrforgetful Posted October 10, 2007 Posted October 10, 2007 Out of hours ... no support really but that is mainly due to it just working. The main problem is stopping staff using it so we can do maintenance on the servers after school (or at weekends if I am bored) I'm sorry Grumbles but that has to be the saddest quote in a long long time. As for downtime I just explain out of school hours expect random unannounced outages.
ZeroHour Posted October 10, 2007 Posted October 10, 2007 The main problem is stopping staff using it so we can do maintenance on the servers after school (or at weekends if I am bored) Due to our staff having to use the VPN for most services I have timed ISA 2004 rules that block webdav etc and filter all access for them. Our staff are kicked off when the backup starts.
ITWombat Posted October 14, 2007 Posted October 14, 2007 Silly question but how secure is WebDaV, especially on Microsoft IIS. Google throws u a number of issues but it looks likely to be mostly historical issues with IIS 5 i.e on WIndows 2000. Does WebDaV on Windows 2003 benefit from II6's generally good security record? Does the DPA make HTTPS obligatory for schools when it comes to implementing WebDaV for remote access?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now