I would agree here. I would never leave port 5900 open to the internet. VPN in and then VNC to the workstation you want to control. There are many flavors of VNC now. The one I currently use is tightVNC (google it). It has better compression, and typically does not have the screen refresh issues previously mentioned. There are SSH add-ons for VNC, but I have never used them. VPN is more secure. VNC also works cross-platform which is a plus. But there are also RDP options for different platforms now. RDP is also a derivative of Citrix which is very efficient. Overall VNC is Fast, easy, and free. For light remote access, it is great. If you have the $$$ though, an IP enabled KVM is the way to go. Then you get boot level access to the server. You can reboot a server and even muck around in the BIOS, configure RAID controllers, etc. I have tried IP KVM's from Startech, Belkin, and Raritan. Raritan was hands down the winner. Raritan was also 3X more expensive. Ray Dzek Network Operations Supervisor Specialized Bicycle Components PH: 408-782-5420 FX: 408-782-5421 -----Original Message----- From: Stephen Herrera [mailto:sherrera@xxxxxxxxxx] Sent: Thursday, April 08, 2004 7:40 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: VNC http://www.ISAserver.org I have a back to back setup but I do not allow Terminal Service or VNC in. I VPN in to may workstation and then connect to what I need from there. Steve -----Original Message----- From: cismic [mailto:cismic@xxxxxxx] Sent: Thursday, April 08, 2004 6:21 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: VNC http://www.ISAserver.org How about in a back to back setup? What would be the thought's on terminal service into the web server on the dmz? What would the rules be on someting like this? Joseph ----- Original Message ----- From: "Jim Harrison" <jim@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, April 08, 2004 6:26 AM Subject: [isalist] Re: VNC http://www.ISAserver.org Terminal Services; period. Easiest to set up and use, easiest to publish through ISA. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! On Thu, 08 Apr 2004 10:41:20 +0200 "Lubo? Ková?" <lkova@xxxxxxxxxxxxxxx> wrote: http://www.ISAserver.org Helo, is it secure to use Real VNC (http://www.realvnc.com/) instead of Terminal Service, for remote desktop management on ISA Server 2000 on Windows2000 Server? What configuration is more secure? Which software for remote desktop management do you recommend? Thanks L. Kovar Hydroprojekt CZ a.s. Czech Republic