Terminal Server vs other solution

[PBXJay]

Good morning,

Looking for the best solution:

Without sacrificing too much speed for heavy encryption, looking for a solution that will allow users to remotely connect to network

Have been using Terminal server 2003 for only a handful. Looks like the number of users going to be increasing to approx 40+

Looking into other VPN solutions as well.

Criteria:

Best encryption without too much overhead

Least amout of setup on client machine yet prevent user from passing out information to friend to logon....

Thanks,
J

 

[Davetoo]

Cisco VPN Concentrator (included in their replacement for the PIX series) with RSA SecurID to prevent passing out info to friends.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

 

[PBXJay]

Forgot to mention I am working for a municipality with fixed budget so solution needs to be cost effective.

Already have 2003TS up and running (and paid for). Should we just tighten security on it?

 

[pgaliardo]

I like Davetoo's suggestion, butif your budget is an issue, the 2 articles below should help you tighten up Terminal Services without additional cost.

http://www.windowsecurity.com/articles/Windows_Terminal_Services.html

http://support.microsoft.com/kb/816521

 

[BridgeRE]

I would go for a some sort of VPN device, if they just need to connect to the network for mail and files. VPN is the way to go.

 

[ascotta]

VPN if just access to network.

Terminal Services or Citrix if you need to hand out applications.

[blue] A perspective from the other side!![/blue]

Cheers
Scott

 

[LWComputingMVP]

People should not forget one critical factor - VPN is great, but it shouldn't (in most cases) be used by itself. I generally recommend VPN connection to the network and then Terminal Server connection to actually work.

You have to factor in bandwidth and what people will be doing. 40 users on a Terminal Server connection will require about a T1 connection. 40 users on a VPN - if they expect to open files and work off most types of applications, can expect to need MUCH MORE than a T1 - unless they connect to a terminal server and work out of that. Mind you, even brief print jobs can suck bandwidth with a terminal services connection, so for 40 users, you should probably have AT LEAST a bonded T1 (3 Mb total internet bandwidth OR MORE).

 

[PBXJay]

We were actually looking at VPN to the network and using Term Server.

Seeking solid VPN device that is not too costly

 

[PBXJay]

Found an interesting guide on TechRepublic recommending Microsoft's IAS Radius server

http://i.t.com.com/i/tr/downloads/home/gou_secure-wireless-guide.pdf

Anybody using it?