Is it a new working model conceived or facilitated by the network of networks? What role does security play in this scenario?
By Osvaldo Callegari*
Within the possibilities offered by current technology, remote work is present on the set. Currently certain modalities in the workplace tend to be carried out through remote processes. This leads to using tools that give us some security and agility in the processes. We will look at three world-famous products: Famatech's® RADMIN, Teamviewer® and Logmein®. For this we have analyzed several case studies that complement the article. The best background of a product is shown through a success story.
That is why we discuss three leading companies in the remote access market, the option is you dear reader.
Radmin Case Study
Persia International Bank PLC has two branches - one in London and one in Dubai. This bank offers its customers various services, such as deposit and savings accounts, money transfers and currency exchange facilities.
The bank's IT department has 72 employees, who work in two locations. The IT environment includes both LAN and WAN networks, Windows 2000/2003 operating systems. Branches in both London and Dubai include the same number of desktop computers.
One of the main tasks of the IT department is to take care of any user and their activities. Prior to the execution of Radmin, IT department employees had used Remote Desktop Windows. But this solution did not meet their expectations, as it was not transparent and effective enough at work.
The IT department of Persia International Bank has made the decision to use Radmin (Remote Administrator). According to the words of system administrators, who have chosen this solution because of its ease of use and adequate level of support.
Radmin allows you to quickly monitor the status of the customer's system. Persia International IT Specialists marks the Bank of ease of use, high speed, installation file saving space and cost-effectiveness of the solution.
To maintain Radmin, the user does not need to have any special computer skills and there is no need to install any additional software, it is enough to have an internet connection and any Microsoft Windows operating system.
The most distinctive features of the solution is an easy-to-use interface and the absence of unnecessary value-added functions. Another important feature of Radmin is its high speed and performance.
The product allows the user to carry out an effective and unwavering control of the operations of the remote equipment. Radmin display technology is optimized for the correct transfer of the remote computer screen. The user has the ability to work effectively even on a very slow dial-up connection.
The need to increase bandwidth can be dispensed with to provide adequate screen refresh speed. The IT department of Persia Radmin International Bank uses all 8 Windows XP workstations.
This case touches on security aspects
The IT department of Persia Banco Internacional is also very satisfied with Radmin's high security standards. Specialists who mark the way point out that it is password protected on the server. This protection is performed by Radmin in the system registry. Only a user with administrator rights can have access to this branch of the registry.
"The specialists in our department are very satisfied with Radmin's work. It is the most compact, useful, cost-effective and easy-to-use remote control solution we have tested," Ramanna Jayakumar, Operations Manager of Persia Bank International IT department.
The execution of Radmin at Persia International Bank PLC was part of a major upgrade of the company's IT environment. The solution is used in the IT department by only three employees. Saving personnel and workplace costs, increases the efficiency of the business as a whole. System administrators are very satisfied with Radmin's cost-effective price, high speed and ease of use.
"Radmin has made the IT department more productive, this type of solution was required for a long time."
Mission Los Angeles is a non-profit organization serving the homeless living on the streets of Los Angeles.
For more than 70 years they have saved many lives and have had a profound impact on thousands of people by providing compassionate, humanitarian services to those who desperately need it.
Having started as a small rescue mission is now one of the country's largest providers of homeless service. The Los Angeles Mission continues to offer large-scale hot meals, safe shelter, clothing, personal care, transformation, and long-term rehabilitation for the hungry, injured, and homeless; to men, women and children.
Currently 160 employees work for the Mission. The organization also has two remote locations: a storage depot and residence service. The main complex consists of a four-story building with a basement and several desktop computers. The Los Angeles Mission has one hundred and ten desktop computers, fifty-seven assigned to teach classes and nine servers for daily work. There is no connection between the main complex and the two remote sites.
Only four full-time IT employees work for the organization, so answering technical calls usually requires a physical visit to each of the desks that require it. The servers are located in three different areas of the complex, so traveling routinely involves a significant outlay of costs.
In an effort to make their work a more efficient value, the first Los Angeles mission used the Microsoft Desktop Connection from a distance, which proved to be less useful for their requirements.
The Mission needed remote control software that was faster, more reliable and easier to use.
Joe Mendez, the los Angeles Mission system administrator, chose Radmin for its fast, transparent, and easy-to-use installation.
Radmin perfectly serves the supply needs of the Los Angeles Mission, because taking remote control with Radmin allows for technical support calls and end-user training. The console makes it easy to select a remote machine to manage. Mendez plans to streamline mission-building IT functions using Radmin. Famatech is proud that Radmin can help such socially remarkable organizations as the Los Angeles Mission in their crusade to bring hope to those who have no hope.
Safety points to highlight in Radmin
It is a remote control software that offers great opportunities for business and private users, whenever you think about this alternative there is a risk that an unauthorized person will access your computer. Therefore, professional-level remote control software should provide the means of protection against intruders and ensure maximum security.
Security breaches have long been referred to as "paranoia" in numerous security-related forums.
The Radmin system adopted this position: Famatech installed a version of Radmin Server on one of its servers and gave it access to the Internet, offering in turn a prize for anyone who could violate its defenses. During almost 6 months of activity no one could achieve it.
Version 3 significantly increased security.
Security options have been strengthened since the previous version. The software has its own security. It's called Radmin Security, with which you can now keep individual user passwords and permissions. The new authentication method is based on the diffie-Hellman key exchange with a key size of 2048 bits.
Thanks to data integrity protection and randomly generated key makes complete immunity in any type of attack, including the "man in the middle".
You can also use Windows native authentication services, avoiding the need to maintain separate security systems from user data, with Kerberos as support support available.
Advanced 256-bit AES
If Windows security or Radmin security is selected, the data (desktop screens, keystrokes and files) that is transferred over the network is heavily encrypted with the high security 256-bit AES algorithm. For each connection a 256-bit random key is generated and the data is checked for integrity to prevent security breach and prevent tampering. Unlike other remote control software, the encryption in Radmin is continuously active and cannot be 'turned off'. The program code has been optimized and the data transfer protocols were carefully inspected to ensure that data protection works with CPU usage not exceeding the 5% level.
Maximum password security
Radmin ensures that the password cannot be stolen by physical access to the local or remote computer. The password is saved at the Radmin Server end in a hash form instead of plain text. This hash cannot be used as a password substitute for user authorization.
Radmin calendar log passwords are not stored on the Radmin Viewer endpoint, so the program can be used securely in a corporate environment. The legitimate user can be absolutely sure that no one will be able to access the remote computer in their absence. Even if the user connects from a public place such as an Internet café, the remote computer will still be protected. On the other hand, since passwords are not transferred over the network in any way, there is no point in trying to retrieve them just by analyzing network traffic.
Built with delays and password locks
Even though some users tend to use simple passwords, Radmin is still secure. Attempts to guess the password are effectively detected and blocked by the program.
IP filtering
To ensure maximum protection, Radmin Server can be configured to not allow access by other IP addresses and networks, only addresses that have been specifically declared in the configuration access.
Connection permission option
Radmin Server can be configured to prompt the remote user to accept an incoming connection. This option allows access to be available only if a user on the remote endpoint accepts the connection. The connection can also be rejected by the remote user when, for example, they work with private information.
Protected from server configuration
Radmin Server settings are protected from unauthorized changes. A user must have administrator privileges to change settings.
Blank passwords are not allowed
Radmin Server must be configured to use Windows security or Radmin security. It is not possible to configure Radmin Server for remote access with the blank password.
Protected and digitally signed executables
Radmin has high security, self-diagnostic code that makes it virtually impossible to modify executable files. The code is also heavily encrypted and reverse-engineered. It is almost impossible to remove the protection or make modifications to the code. Radmin's files are also digitally signed by Famatech to make sure they are authentic.
Connection attempts are logged
Radmin Server keeps a record of all attempts to log in remotely to the system. The log file is available in HTML format and can be used to further examine and monitor suspicious activity, such as attempts to guess the password or connection attempts in non-working hours. Windows Event Logging can also be enabled.
We will continue in part II and III.
*For more information about the recent article you can write to the author at [email protected]
Leave your comment