logmein and windows based remote access tools security reputation

Question

How do windows based remote access apps such as logmein ‘shape up’ in terms of security in a sensitive corporate environment, when remote support contractors connect to LAN-side windows based servers and workstations. We have observed some 3rd party technical support suppliers preference are tools such as logmein – to my knowledge the accounts used for connections are heavily restricted in that they only have access to specific servers/desktops only – I am trying to understand any major risks associated with such tools and where they rank in terms of security, or any additional safeguards that are required before permitting the use of such tools in a corporate environment, and what influence a security department can have on permitting use of such tools, or even identifying when and where they are in use! Major worry is we do not want end-users creating security holes in our perimeter defences by allowing the usage of such tools without thorough risk assessment.

Answer 1

Hi crib bar,

Thank you for posting in the Q&A Forums.

Using Windows-based remote access applications such as LogMeIn in an enterprise environment does require careful consideration of security. The following are the main risks associated with such tools.

Unauthorized access: Inadequate account security measures can lead to unauthorized personnel accessing the system.

Data leakage: Data transmitted during remote access may be intercepted or leaked.

Malware: Remote access tools may become a pathway for malware to enter the network.

Account Misuse: If a third-party vendor's account is misused, it may pose a threat to an organization's systems.

Reliance on third-party security measures: Organizations lack direct control over the security measures of third-party vendors.

The use of remote access tools such as LogMeIn in an enterprise environment can increase efficiency, but strict security measures must be taken to protect systems and data. By implementing the security measures and best practices outlined above, organizations can minimize security risks while leveraging remote support. Before allowing the use of such tools, security departments should conduct a thorough risk assessment and ensure that all users strictly adhere to security protocols.

Best regards

NeuviJ

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.