IT Employment

Ask something
Discussion Locked

PCANYWHERE OVER INTERNET

0 helpful
6 replies

by arief

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am new to pcanywhere.I would like to have connetion between tow offices. they both have T1 connetion with firewall. both pc's use private address that is assign to them routhers(nat). There is no Servers.
I was wondering how can they find each other in internet since the dont have legal ip adress.

6 replies

by n3bxw

The are two ways to get through the firewall-- allow the PC to around the firewall (which opens up your PC to the internet) or register a domain name with the ip address of your wan connection and have the firewall redirect the connection to the local PC. Check to see what ports it may require for you to publish it on your firewall. The other alternative is a modem to direct connect PC to PC.

by madmark

If you use PCA without a VPN connection (even with one!) you are asking for trouble. Scans for PCA ports are done, and if your PC isn't secured very well, you will be hosting all manner of sites for other people in no time.

The modem may be slow, but it is a better mechanism. Make sure that you lock that down too, or you could end up war dialed. Use the "CallBack" function and only allow predetermined callback numbers.

Also, use the highest authentication method available no matter what you do, and if you go the VPN route, use two different, complex passwords. One for the VPN client and one for the PCA login!

Just my 2?

by slacker

Have your sysadmin take one of your real IP's and assign it a NAT to the fake IP of the PC you want to connect to. Use the real IP to connect to... The router will make the translation as though you were really live on the internet.

by madroxxx

This is the correct way to do it. You will have to open up the TCP and UDP ports required for PCAnywhere(you can find them by searching symantecs site) on your firewall.

by ghstinshll

You're creating one big swiss cheese hole through for security problems. If you risk this, make sure you use VERY STRONG passwords in connecting. Make it a very long password with numbers, caps, symbols, etc...

by lordinfidel

At the firewalls at each location.

Depending on the product that you are using to do the translation for you.

Most of them allow you to specify a port that can be forwarded to one of the pvt ips.

Let's say the pvt ip is 192.168.1.5 and you have pcanywhere configured for port 66670.

You should be able to say at the fwl/nat device, anything inbound on port 66670 should be forwarded to port 66670.

***PCanywhere though connected via the net is all bad unless you can limit it's connection on that port to inbound IP's**** Do not let just any one connect to that port.....

Preferred scenario for PcAnywhere is to do a direct connection via modem (modem to modem). Where you essentially dial up right into the pc.

Going over the net is extremely dangerous for remote admin software, especially if there is no VPN or secure link set-up.

This discussion is closed to new replies.