Loading ...
Loading ...
Loading ...
125
6. SSH Tunnels and SDT Connector
6.12 VNC Security
VNC access generally allows access to your whole computer, so maintaining strong security is important. VNC uses a random
challenge-response system to provide the basic authentication that allows you to connect to a VNC server. This is reasonably
secure and the password is not sent over the network.
Once connected, all subsequent VNC traffic is unencrypted and a malicious user could snoop your VNC session. VNC scanning
programs are also available, which scan a subnet that searches for PCs listening on VNC ports.
Tunneling VNC over a SSH connection ensures all traffic is strongly encrypted. When using this method, no VNC port is ever
open to the internet, so no one scanning for open VNC ports will be able to find your computers. When tunneling VNC over a
SSH connection, the only port which you are opening on your console server is SDT port 22.
Sometimes it may be prudent to tunnel VNC through SSH, even when the viewer PC and the console server are both on the
same local network.
Loading ...
Loading ...
Loading ...