Remote access
Remote access allows connecting to systems and resources from remote locations securely.
What is Remote Access?
Remote access is the ability to connect to systems, applications, or resources from remote locations through communication networks.
Types of Remote Access
By Protocol
- **RDP": Remote Desktop Protocol
- **VNC": Virtual Network Computing
- **SSH": Secure Shell
- **Telnet": Terminal Network (obsolete)
By Application
- **TeamViewer": Commercial software
- **AnyDesk": Lightweight software
- **Chrome Remote Desktop": Google
- **Microsoft Remote Desktop": Microsoft
By Infrastructure
- **VPN": Virtual Private Network
- **Citrix": Application virtualization
- **VDI": Virtual Desktop Infrastructure
- **Cloud": Cloud-based access
AnyDesk
- **Features": Lightweight, fast, multiplatform
- **Use": Technical support, remote work
- **Security": End-to-end encryption
- **License": Free for personal use
TeamViewer
- **Features": Advanced features
- **Use": Technical support, presentations
- **Security": Two-factor authentication
- **License": Commercial
RDP (Remote Desktop Protocol)
- **Features": Native to Windows
- **Use": Access to Windows servers
- **Security": Integrated authentication
- **License": Included in Windows
VNC (Virtual Network Computing)
- **Features": Multiplatform
- **Use": Access to Linux/Unix desktops
- **Security": Optional encryption
- **License": Open source
Configuration
RDP on Windows
1
2
3
4
5
| # Enable RDP
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server' -name "fDenyTSConnections" -value 0
# Configure firewall
New-NetFirewallRule -DisplayName "Remote Desktop" -Direction Inbound -Protocol TCP -LocalPort 3389 -Action Allow
|
SSH on Linux
1
2
3
4
5
6
7
8
9
10
11
12
| # Install OpenSSH
sudo apt install openssh-server
# Configure SSH
sudo nano /etc/ssh/sshd_config
# Enable key authentication
PubkeyAuthentication yes
PasswordAuthentication no
# Restart service
sudo systemctl restart ssh
|
VNC on Linux
1
2
3
4
5
6
7
8
| # Install VNC Server
sudo apt install tightvncserver
# Configure VNC
vncserver :1
# Configure password
vncpasswd
|
Security
Authentication
- **Passwords": Strong passwords
- **Keys": SSH keys
- **2FA": Two-factor authentication
- **Certificates": Digital certificates
Encryption
- **TLS/SSL": Transport encryption
- **SSH": SSH encryption
- **VPN": Encrypted tunnels
- **End-to-End": End-to-end encryption
Access Controls
- **Firewall": Firewall rules
- **IP Whitelisting": IP whitelist
- **Time Restrictions": Time restrictions
- **User Permissions": User permissions
Use Cases
Technical Support
- **Help Desk": Help desk
- **Remote Support": Remote support
- **Troubleshooting": Problem resolution
- **Maintenance": Remote maintenance
Remote Work
- **Home Office": Work from home
- **Mobile Workers": Mobile workers
- **Field Service": Field service
- **Disaster Recovery": Disaster recovery
Administration
- **Server Management": Server management
- **Network Administration": Network administration
- **System Monitoring": System monitoring
- **Backup Management": Backup management
Best Practices
Security
- **Strong Authentication": Strong authentication
- **Encryption": Communication encryption
- **Access Control": Access control
- **Monitoring": Session monitoring
Configuration
- **Timeouts": Session timeouts
- **Logging": Activity logging
- **Audit": Regular audits
- **Updates": Security updates
Operation
- **Documentation": Access documentation
- **Training": User training
- **Incident Response": Incident response
- **Compliance": Regulatory compliance
References