johbreaking Posted July 13, 2017 Posted July 13, 2017 How do you do remote access just for yourself. My last school had citrix so no issue for me there but sometimes i need to log in from home and at the moment i do not have any way of doing it. Can i set up a RDP connection?
dapaulio Posted July 13, 2017 Posted July 13, 2017 Easiest way is to install team viewer or similar You could create a gateway server which would future proof incase you are asked to offer a remote desktop solution to the staff
vizubeat Posted July 17, 2017 Posted July 17, 2017 Apache Guacamole https://guacamole.incubator.apache.org/
Koldov Posted July 17, 2017 Posted July 17, 2017 I used LogMeIn and when that stopped being free, Teamviewer (I'm not sure on their licensing). But now we are on an LGFL connection which has a specific and (fairly long winded) secure connection website to go through for remote access. If that hadn't been possible I might have looked into some sort of Direct Access/Remote Access/Gateway on the server, but just for one person it seems like overkill.
IrritableTech Posted July 17, 2017 Posted July 17, 2017 Have you contacted your ISP or do you have access to your firewall - it might have a VPN already setup or available to you?
cpjitservices Posted July 17, 2017 Posted July 17, 2017 VPN / Guacamole / Google Remote Desktop (Chrome)
Arcolite Posted July 18, 2017 Posted July 18, 2017 TeamViewer here too. Running on my Office desktop just in case I need to nip onto the network and do something out of hours (rarely happens thankfully!).
JohnJackson Posted September 15, 2017 Posted September 15, 2017 Guys, please let me know what you need for slick remote access on LGfL - I'm keen to understand as CEO my customer frustrations and want to sort them.
zag Posted September 15, 2017 Posted September 15, 2017 Standard RDP server on windows 2008 R2, then use remote desktop. Just change the port in the registry to make it hidden from flyby hackers.
cpjitservices Posted September 15, 2017 Posted September 15, 2017 Standard RDP server on windows 2008 R2, then use remote desktop. Just change the port in the registry to make it hidden from flyby hackers. Well A Portscan would still detect it, What I would do is build an SSH Tunnel key auth, then once you've logged into your SSH Tunnel RDP internally through to your servers. Saves having RDP advertised on the web. Very easy to setup Putty to create the Tunnel, Login to your SSH Server via putty then RDP into your servers How to Tunnel Web Traffic with SSH Secure Shell
zag Posted September 15, 2017 Posted September 15, 2017 Well A Portscan would still detect it, Well yes you are of course correct, I did look into this when we had a problem with ransomware. That was distributed on a port 3389 global scan against any account that had the same username and password. It was surprisingly effective and just goes to show that opening up any standard port on the internet is dangerous. TrendLabs Security Intelligence BlogBrute Force RDP Attacks Plant CRYSIS Ransomware - TrendLabs Security Intelligence Blog Its just one incident but goes to show you can never be too careful.
cpjitservices Posted September 15, 2017 Posted September 15, 2017 (edited) Well yes you are of course correct, I did look into this when we had a problem with ransomware. That was distributed on a port 3389 global scan against any account that had the same username and password. It was surprisingly effective and just goes to show that opening up any standard port on the internet is dangerous. TrendLabs Security Intelligence BlogBrute Force RDP Attacks Plant CRYSIS Ransomware - TrendLabs Security Intelligence Blog Its just one incident but goes to show you can never be too careful. Yeah its a nightmare, VPN or SSH with Keys, with Dual factor on Windows Edited September 15, 2017 by cpjitservices
mjk Posted September 15, 2017 Posted September 15, 2017 rdp is fine if you want access to one server, or you're happy bouncing from different ones. To get decent access at a network level you need a VPN !
LeMarchand Posted September 15, 2017 Posted September 15, 2017 Teamviewer (I'm not sure on their licensing). Not free if anyone in the chain is being paid to work the computer/s, IIRC. Anyone got any comments on https://www.remoteutilities.com/ ?
cpjitservices Posted September 15, 2017 Posted September 15, 2017 Not free if anyone in the chain is being paid to work the computer/s, IIRC. Anyone got any comments on https://www.remoteutilities.com/ ? Yep, Garbage
ass17 Posted September 15, 2017 Posted September 15, 2017 We use a Linux SSH tunnel then I can route RDP to my PC directly. Even if our proxy goes down we can still get into the network to diagnose issues.
cpjitservices Posted September 18, 2017 Posted September 18, 2017 We use a Linux SSH tunnel then I can route RDP to my PC directly. Even if our proxy goes down we can still get into the network to diagnose issues. See, I do this. And when I explain to people online that I do this such as on Reddit or Facebook IT, groups... I get grief for it saying I should be using a VPN! Glad to see someone else does this. BUT Do you use username/password or use SSH Keys? THanks
Steve21 Posted September 18, 2017 Posted September 18, 2017 A prime example of why not to just open RDP ports, one of our schools had over 500,000 attempted logins to an old firewall rule over one weekend last month and wondered why they had so many logs showing If you are going to use it (and I'd still say don't) at least make sure it's limited on firewall to your personal IP etc and not the world. Steve 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now