There are a couple of options, usually branded as SSL VPNs, though some might use IPSec:
o- applications/appliances that give network access, using a downloadable client. These are usually coupled with a way to check the connecting machines for various things, to make sure they are fit to connect to the internal network. Our Sonicwall EX6000 does this, including checks for patch levels, that antivirus is installed and running (checking for both version (for example VIPRE 4.0 or greater) and currency of update - definitions must be no less than x days old), and other installed programs. It can even check the MAC address of the connecting unit and use that for part of the authentication, and can run a script that might be present on the connecting machine, and recognizes a wide range of AV packages, as well as supports Mac, Android and iPhone clients. Authentication can be either from AD or from an account local to the Sonicwall, among other options. It's also capable of doing the next option, though that sees much less use. There are other products out there, but we do like our EX6000. o- applications/appliances that will provide a web page that gives access to an RDP session via an ActiveX or Java applet. We have a couple of these - they are old SonicWall 200/2000 SSL VPN units. They can also provide network access, but I didn't allow that facility, because the units didn't have the capability to check the connecting machine for current antivirus, nor provide other client checks. Authentication on these unit could be done against AD, but I chose to use local accounts. More advanced/expensive units, such as the EX6000 might also provide for 2-factor authentication, such as RSA cards or SMS messages, or some other technique. HTH, Kurt On Fri, Mar 2, 2012 at 06:41, Rhonda Richardson <[email protected]> wrote: > > We currently have 50 - 100 folks that want access > to applications (specifically licensed to the desktop) and network resources > from home or on the road. For those that have laptops, we plan to provide > them with a VPN client to give them access to the network, but the majority > of the folks wanting access have desktop PCs. > > How are others providing this type of access for those that don't have > laptops? > > Thanks. > > Rhonda > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
