ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Looking for a remote access solution

    IT Discussion
    dashrender remote access
    4
    22
    1.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JaredBuschJ
      JaredBusch
      last edited by

      Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

      Done.

      DashrenderD 1 Reply Last reply Reply Quote 2
      • DashrenderD
        Dashrender @JaredBusch
        last edited by

        @jaredbusch said in Looking for a remote access solution:

        Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

        Done.

        I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

        1 JaredBuschJ scottalanmillerS 3 Replies Last reply Reply Quote 0
        • 1
          1337 @Dashrender
          last edited by

          @dashrender said in Looking for a remote access solution:

          @jaredbusch said in Looking for a remote access solution:

          Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

          Done.

          I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

          If you can't run over VPN due to latency, you can't run over Zerotier. It will be exactly the same.

          JaredBuschJ DashrenderD scottalanmillerS 3 Replies Last reply Reply Quote 0
          • JaredBuschJ
            JaredBusch @1337
            last edited by

            @pete-s said in Looking for a remote access solution:

            @dashrender said in Looking for a remote access solution:

            @jaredbusch said in Looking for a remote access solution:

            Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

            Done.

            I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

            If you can't run over VPN due to latency, you can't run over Zerotier. It will be exactly the same.

            Are you stupid?

            1 1 Reply Last reply Reply Quote 0
            • 1
              1337 @JaredBusch
              last edited by

              @jaredbusch said in Looking for a remote access solution:

              @pete-s said in Looking for a remote access solution:

              @dashrender said in Looking for a remote access solution:

              @jaredbusch said in Looking for a remote access solution:

              Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

              Done.

              I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

              If you can't run over VPN due to latency, you can't run over Zerotier. It will be exactly the same.

              Are you stupid?

              Always.

              1 Reply Last reply Reply Quote 0
              • DashrenderD
                Dashrender @1337
                last edited by Dashrender

                @pete-s said in Looking for a remote access solution:

                @dashrender said in Looking for a remote access solution:

                @jaredbusch said in Looking for a remote access solution:

                Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

                Done.

                I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

                If you can't run over VPN due to latency, you can't run over Zerotier. It will be exactly the same.

                Jared is saying to RDP into the PC in the DC I mentioned as an option.

                But how you were reading it, is how I first read his recommendation - then duh.. realized the RDP part... which is a great idea...

                JaredBuschJ 1 Reply Last reply Reply Quote 0
                • JaredBuschJ
                  JaredBusch @Dashrender
                  last edited by

                  @dashrender said in Looking for a remote access solution:

                  @pete-s said in Looking for a remote access solution:

                  @dashrender said in Looking for a remote access solution:

                  @jaredbusch said in Looking for a remote access solution:

                  Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

                  Done.

                  I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

                  If you can't run over VPN due to latency, you can't run over Zerotier. It will be exactly the same.

                  Jared is saying to RDP into the PC in the DC I mentioned as an option.

                  Which you can also do with VPN solutions.

                  DashrenderD 1 Reply Last reply Reply Quote 1
                  • DashrenderD
                    Dashrender @JaredBusch
                    last edited by

                    @jaredbusch said in Looking for a remote access solution:

                    @dashrender said in Looking for a remote access solution:

                    @pete-s said in Looking for a remote access solution:

                    @dashrender said in Looking for a remote access solution:

                    @jaredbusch said in Looking for a remote access solution:

                    Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

                    Done.

                    I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

                    If you can't run over VPN due to latency, you can't run over Zerotier. It will be exactly the same.

                    Jared is saying to RDP into the PC in the DC I mentioned as an option.

                    Which you can also do with VPN solutions.

                    ZT is a VPN solution.

                    JaredBuschJ 1 Reply Last reply Reply Quote 1
                    • JaredBuschJ
                      JaredBusch @Dashrender
                      last edited by

                      @dashrender said in Looking for a remote access solution:

                      @jaredbusch said in Looking for a remote access solution:

                      @dashrender said in Looking for a remote access solution:

                      @pete-s said in Looking for a remote access solution:

                      @dashrender said in Looking for a remote access solution:

                      @jaredbusch said in Looking for a remote access solution:

                      Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

                      Done.

                      I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

                      If you can't run over VPN due to latency, you can't run over Zerotier. It will be exactly the same.

                      Jared is saying to RDP into the PC in the DC I mentioned as an option.

                      Which you can also do with VPN solutions.

                      ZT is a VPN solution.

                      Not of the type you were discussing. Don't be a Scott.

                      OpenVPN with MFA: https://openvpn.net/blog/openvpn-mfa-setup-community-edition/

                      scottalanmillerS 1 Reply Last reply Reply Quote 0
                      • JaredBuschJ
                        JaredBusch @Dashrender
                        last edited by JaredBusch

                        @dashrender said in Looking for a remote access solution:

                        @jaredbusch said in Looking for a remote access solution:

                        Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

                        Done.

                        I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

                        Then put the 2fa on the Windows RDP login with a service like Duo.
                        https://duo.com/docs/rdp
                        https://duo.com/editions-and-pricing/duo-free

                        Just use ZT to lower (all but remove) the attack surface.

                        DashrenderD scottalanmillerS 2 Replies Last reply Reply Quote 1
                        • DashrenderD
                          Dashrender @JaredBusch
                          last edited by

                          @jaredbusch said in Looking for a remote access solution:

                          @dashrender said in Looking for a remote access solution:

                          @jaredbusch said in Looking for a remote access solution:

                          Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

                          Done.

                          I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

                          Then put the 2fa on the Windows RDP login with a service like Duo.
                          https://duo.com/docs/rdp
                          https://duo.com/editions-and-pricing/duo-free

                          Just use ZT to lower (all but remove) the attack surface.

                          There you go - I like that, and Duo has a free tier for 10 users.

                          scottalanmillerS 1 Reply Last reply Reply Quote 0
                          • scottalanmillerS
                            scottalanmiller @Dashrender
                            last edited by

                            @dashrender said in Looking for a remote access solution:

                            This mostly leads to a VDI type solution, at least in my mind.

                            Start with RDS. Only look at VDI when RDS isn't possible. RDS is easier to manage, less costly. (All this assuming that Windows is a requirement.)

                            1 Reply Last reply Reply Quote 0
                            • scottalanmillerS
                              scottalanmiller @Dashrender
                              last edited by

                              @dashrender said in Looking for a remote access solution:

                              @jaredbusch said in Looking for a remote access solution:

                              Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

                              Done.

                              I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

                              ZT + RDP IS MFT!!!

                              1 Reply Last reply Reply Quote 0
                              • scottalanmillerS
                                scottalanmiller @1337
                                last edited by

                                @pete-s said in Looking for a remote access solution:

                                @dashrender said in Looking for a remote access solution:

                                @jaredbusch said in Looking for a remote access solution:

                                Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

                                Done.

                                I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

                                If you can't run over VPN due to latency, you can't run over Zerotier. It will be exactly the same.

                                In this example, ZT is just for encapsulating RDP. So it's RDP encryption, not the app over VPN.

                                1 Reply Last reply Reply Quote 0
                                • scottalanmillerS
                                  scottalanmiller @JaredBusch
                                  last edited by

                                  @jaredbusch said in Looking for a remote access solution:

                                  Not of the type you were discussing. Don't be a Scott.

                                  Always a type discussed if someone mentions VPN and knows anything. ZT is no more special or niche than any other VPN. It's every bit as much a VPN as some random other assumed solution.

                                  To most people, VPN is purely a Netflix location trickery tool and has nothing to do with security or access to resources.

                                  DashrenderD 1 Reply Last reply Reply Quote 1
                                  • scottalanmillerS
                                    scottalanmiller @JaredBusch
                                    last edited by

                                    @jaredbusch said in Looking for a remote access solution:

                                    @dashrender said in Looking for a remote access solution:

                                    @jaredbusch said in Looking for a remote access solution:

                                    Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

                                    Done.

                                    I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

                                    Then put the 2fa on the Windows RDP login with a service like Duo.
                                    https://duo.com/docs/rdp
                                    https://duo.com/editions-and-pricing/duo-free

                                    Just use ZT to lower (all but remove) the attack surface.

                                    That would get them up to 3FA (which isn't a bad thing) assuming ZT isn't somehow tied to some other authentication mechanism.

                                    DashrenderD 1 Reply Last reply Reply Quote 0
                                    • scottalanmillerS
                                      scottalanmiller @Dashrender
                                      last edited by

                                      @dashrender said in Looking for a remote access solution:

                                      @jaredbusch said in Looking for a remote access solution:

                                      @dashrender said in Looking for a remote access solution:

                                      @jaredbusch said in Looking for a remote access solution:

                                      Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

                                      Done.

                                      I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

                                      Then put the 2fa on the Windows RDP login with a service like Duo.
                                      https://duo.com/docs/rdp
                                      https://duo.com/editions-and-pricing/duo-free

                                      Just use ZT to lower (all but remove) the attack surface.

                                      There you go - I like that, and Duo has a free tier for 10 users.

                                      But not required. You have 2FA without it. ZT cert + RDP password.

                                      1 Reply Last reply Reply Quote 0
                                      • DashrenderD
                                        Dashrender @scottalanmiller
                                        last edited by

                                        @scottalanmiller said in Looking for a remote access solution:

                                        To most people, VPN is purely a Netflix location trickery tool and has nothing to do with security or access to resources.

                                        I don't know about that - at least not anymore. The pandemic I think brought VPN and security into the general conscious.

                                        scottalanmillerS 1 Reply Last reply Reply Quote 0
                                        • DashrenderD
                                          Dashrender @scottalanmiller
                                          last edited by

                                          @scottalanmiller said in Looking for a remote access solution:

                                          @jaredbusch said in Looking for a remote access solution:

                                          @dashrender said in Looking for a remote access solution:

                                          @jaredbusch said in Looking for a remote access solution:

                                          Put zerotier on the box in the DC and the user's box. restrict it to only RDP.

                                          Done.

                                          I really like this - sadly - our insurance policy requires MFA for remote access. I'll have to see if ZT has anything for that.

                                          Then put the 2fa on the Windows RDP login with a service like Duo.
                                          https://duo.com/docs/rdp
                                          https://duo.com/editions-and-pricing/duo-free

                                          Just use ZT to lower (all but remove) the attack surface.

                                          That would get them up to 3FA (which isn't a bad thing) assuming ZT isn't somehow tied to some other authentication mechanism.

                                          As it's been AGES since I've used ZT - can you make the user have to log into it each time they launch it? If yes - and it's logon isn't associated with AD (as you mentioned) then OK - I see how you consider ZT and RDP MFA.

                                          scottalanmillerS 1 Reply Last reply Reply Quote 0
                                          • scottalanmillerS
                                            scottalanmiller @Dashrender
                                            last edited by

                                            @dashrender said in Looking for a remote access solution:

                                            @scottalanmiller said in Looking for a remote access solution:

                                            To most people, VPN is purely a Netflix location trickery tool and has nothing to do with security or access to resources.

                                            I don't know about that - at least not anymore. The pandemic I think brought VPN and security into the general conscious.

                                            Yes, but in the way that I said. Everyone knows the term, everyone thinks it's a thing for Netflix. Two years ago, a few people knew it. Now with the boom of YouTubers and these "VPN products" being sold through all the consumer channels, the pandemic has made "VPN as entertainment" a forefront thing.

                                            1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 1 / 2
                                            • First post
                                              Last post