VNC (How secure is it?)

VNC itself sends passwords in clear text format when you authenticate against the server. The remainder of the traffic between the host and the remote is also unencrypted.

This is a potential security hole which could allow someone else to access the system.

You might want to look into a different build of VNC called TightVNC.

This is the FAQ which comments on exactly the question you asked.

http://www.tightvnc.com/faq.html#howsecure

Hope this helps out a little.

What was stated about VNC with clear txt passwords, etc is very true. The fact that you have a firewall might help you tighten security if you must use VNC. If you have a static ip address that you are going to using VNC from, them set an exception in the firewall to allow only that single ip address through of the vnc port. Anyone else who tries to connect in will just get blocked by your firewall. Hope this helps.

Woody

open the ptp port on the sonic.
Install a w2k server behind the sonic firewall and instruct the sonic firewall to pass vpn connections to the w2k box.
There for you accomplish secure encrypted connections through your firewall.
Some versions of the sonic firewall does have a dmz zone port also.
you could also set yp the w2k server installed with the vpn connections (Remote and routing service) on the dmz port and make secure vpn connections.

Leopold