June 25, 2007
Scenarios:
- Staff working from home after hours
- Staff working while traveling or visiting clients
- Branch Office Operations
- Outside Contractors
|
Access Requirements:
- Documents
- email
- Calendar
- Contacts
- Applications
|
Methods:
- Remote Control
- Control Own Station
- Control Designated Station (or Pool of Stations)
- Terminal Services (including Citrix) Sessions
- Control Virtual PC Sessions
- Remote Node
- VPN Architecture
- VPN Gateway for Site
- VPN Software Client
- PPTP/L2TP/SSL
- Replication
- via Internet
- USB Flash Drives
- CD/DVD Discs
- Hosted Cloud-based Solutions
Features, Performance & Technical Issues:
- Bandwidth (especially out-bound from HQ)
- Handling large files
- Changes/Setup required
- Application installation & licensing
- Remote Local Printing (double re-direct, O.S. + printer model +
driver version matching)
- NAT (2-way and double) traversal
- Destination Static IP or DDNS
- Mobile stations:
- Workstation Network configuration (dual boot profiles, reserved
DHCP)
- SMTP and port 25 TCP filtration considerations
- Conflicts if stations have other duties after-hours
- Coordinate backup schedule (shrinking window)
Security:
- Member Stations control/audit
- End-to-End Encryption
- Wireless Procedure & Awareness
- Public (free or paid) Access Points
- Danger of cleartext wireless link w/ password for access contol
only, not protection!
- Local Clear-Text Traffic on LAN
- Local Peer Ad-Hoc Connections (in-bound risks)
- Roaming Destination Sites
- Mutual Jurisdiction & Requirements
- User Training
|