Software

Ask something
Question Locked

How secure is LogMeIn/Gotomypc?

0 helpful
4 replies

by ohm.paul 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Our company has a central location, where I am, and several (8-10) remote store locations. For obvious IT purposes, it would be very convenient to be able to log in to our remote store location PC's to be able to fix software issues, set up users, install drivers, etc.

I was wondering if the free programs like LogMeIn and GotomyPC are secure enough to where I could have them installed on the remote store PC's which would allow me to have control of them. It would be difficult to set up a VPN between these stores and our central office just because the remote PC's are already at their locations, so installing and configuring OpenVPN would be near impossible to walk someone through.

What do you all think?

4 replies

by robo_dev

I cannot find fault with it and have been using it without incident for approx the last five years (approx 50 users).

Citrix has implemented the use of strong encryption appropriately, have solid authentiation mechanisms, and lots of administrative controls on top of all that.

The only caveat is that if your users are planning to use shared public PCs, then any solution using username and password is at risk of keystroke logging.

Therefore using multi-factor authentication (eg RSA SecurID) with GoToMyPC would mitigate the risk of keystroke logging or authentication compromise.

by ohm.paul

I have personally been trying LogMeIn as apposed to GoToMyPC, but from what I have read, they have comparable security (SSL 128bit, maybe 256) and I like the way it is laid out.

Our PCs at the remote locations are dedicated to our user so there is no worry about shared access. However, I will be setting up administrative and limited accounts using this cause some of our employees just have no idea what should and shouldn't be on a PC..haha

by ohm.paul

my next question regards access from outside sources into our internal network here at the central location.

When some people are offsite, it is necessary for them to be able to access company resources here at the central office such as sharepoint, etc. Would it be better to have LogMeIn installed on a PC here and allow people to connect to it from outside? Or would it be better to set up OpenVPN on each system that needs to be able to connect from the outside (laptops) and give each one a client key/certificate to allow them to connect to the company resources?

I guess I'm just wondering which would leave less of a vulnerability to our internal network. This is based on a basic OpenVPN configuration, not using OpenSSL or anything like that.

This discussion is closed to new replies.