Microsoft® Windows® Security Resource Kit, Second Edition

Threats to Remote Access Solutions

When you extend network connectivity to remote access clients, several threats exist that can compromise your network’s security. These threats exist because the remote clients are no longer directly connected to the corporate network, but they are connected to public networks (phone or Internet) and are connecting to the corporate network over public networks. The threats caused by this extension of the corporate network to remote clients are as follows:

• Authentication interception

• Data interception

• Bypass of the firewall to the private network

• Nonstandardized policy application

• Network perimeter extended to location of dial-in user

• Denial of service caused by password attempts

• Stolen laptops with saved credentials ...