+SYS.2.2.2.A20 Security During Remote Access Using RDP (H)

SYS.2.2.2.A20 Security During Remote Access Using RDP (H)

The effects on the configuration of the local firewall SHOULD be taken into account when planning remote assistance procedures. The group of users authorised for remote desktop access SHOULD be specified in a corresponding policy and be assigned the corresponding user rights. Remote assistance SHOULD only be provided after explicit invitation via EasyConnect or on the basis of an invitation file. If an invitation is stored in a file, the file SHOULD be protected by a password. In every case, the user currently logged in SHOULD have to agree explicitly to starting a session. The maximum validity of an invitation SHOULD be of an appropriate duration. Strong encryption SHOULD also be used (128-bit, “highest level” setting). Furthermore, automatic password logins SHOULD be disabled. It SHOULD be checked whether diversions of the cache, printers, file repository, and smartcard connections are necessary. If they are not, they SHOULD be disabled. Unless remote control mechanisms are used, they SHOULD be completely disabled.

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις

3. Σχετικοί κανονισμοί

Κανονισμοί

Συνδεδεμένα ζητήματα

Συνδέσεις
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.46 Loss of Integrity of Sensitive Information