Security Risks - RDP thru Web / SSL VPN

[satishcp]

Hi All,

Just curious to know security risks of allowing RDP to a system on company network through Cisco Web / SSL VPN from usually unsecured / unmanaged employees personal laptops / home PCs?

This is needed to strategize new VPN policy for the org.  Any inputs would be highly appreciated.

Thanks,

Satishcp

[Panos Kampanakis]

It depends on your authentication of the user, the crypto algorithms and your policy.

If your algorithms are considered secure enough and the authentication (brute forceable passwords etc) are secure for your policy, I believe they are secure enough.

You are keeping a door open for users to come in. It is all a matter how well locked the door is and how secure you consider it to be.

I hope it helps.

PK