Securely access Win2008R2 Remote Desktop over internet

[albertwt]

Hi All,

 

I've just successfully setup ADSL2+ internet connection in my customer's remote site and I need to support and monitor one custom database application in that Windows Server 2008R2 Std. instance, I wonder what is the best way to achieve this without using 3rd party appliance or hardware ?

 

Shall I just install Terminal Server Gateway (TSG) role in that server using self sign SSL certificate ? (access to that server using IP address).

 

Any kind of comments would be greatly appreciated.

 

Thanks

[SYNACK]

It depends on what kind of control and connectivity you are after. TSG with a self signed cert will work fine for remoting in and controlling a desktop session. If you would like better support for file transfer and other monitering and control tools I would suggest setting up the server as a VPN server, it is free and included with Windows. With 2008r2 you would be able to set up an SSL VPN which can be accessed by any Windows XP SP3 or higher client and will give the the easiest time with network traversal in case either server or access ISP is being problematic.

 

As long as you are using all modern clients to access it, Vista or higher you could even just offer out raw RDP as they have made large improvements in its security. Personally I would still pass it over an encryption solution like SSL VPN or TS Gateway though just for the extra level of security.

[albertwt]

Thanks SYNACK for the reply,

 

Publishing the Remote Desktop Service access using TSG through SSL / port 443 sounds simpler and secure enough assuming the self sign certificate is installed in my workstation to connect into my server.

 

cmiiw.