The Raritan Blog

Yet Another Security Issue with Remote Access Software

Richard Dominach
March 16, 2012

Recent articles in InfoWorld, “Microsoft urges firms to focus on severe RDP flaw,” and PCWorld, “Microsoft issues Urgent Patch for ‘Wormable’ RDP Vulnerability,”(1) illustrate the potential dangers of software-based remote access tools. The vulnerability, cited as “dangerous,” “very serious” and “critical” applies to the Remote Desktop Protocol, widely used throughout the IT industry for remote access. Other software-based systems include VNC, pcAnywhere, and many others.

Software-based remote access is widespread. The InfoWorld article mentions that “There could be as many as 250 million systems with an open RDP port” and “An estimated 140,000 computers running pcAnywhere could be directly contacted from the Internet.” In my previous blog focused on the dangers of poorly configured remote access systems, I cite another article that estimates 83 million open VNC ports.

Users of remote access software should closely follow best security practices as recommended by the applicable vendor and their security organization, as well as immediately apply security patches as they are available. Users should not be complacent about the use of these tools, and should carefully and thoughtfully consider the benefits and risks, applying the proper safeguards to harden and monitor their environments.

Users should also consider the benefits of hardware based remote access, such as KVM-over-IP switches, which provide “out-of-band” access that does not rely on “software” running on the remote server. Out-of-band access can be more secure, provide access even when the server’s OS or network is not working, and provide a wider range of use cases including BIOS-level access and remote booting. A higher level of manageability can be achieved through centralized permissions, authentication, and logging. And as the KVM switch does not rely on software running on the remote servers, there is never a need to patch hundreds or thousands of servers.

With 24x7 reliability required for today’s IT infrastructure, remote access is an absolute necessity. These recent articles illustrate the dangers of software-based approaches and the need to seriously examine your remote access users to implement a secure, productive, and manageable remote access solution.

(1) https://www.pcworld.com/businesscenter/article/251760/microsoft_issues_urgent_patch_for_wormable_rdp_vulnerability.html

An Easier Way to Manage Broadcast Pre- and Post-Production Studio IT Assets

Paula Alves
March 14, 2012

Live programming requires access to playlists and content, 24 hours a day, 7 days a week with no exception, regardless of where the information is physically located. For easier information management, servers have in the past been placed in studios, control rooms, and editing suites. However, space is often limited and the heat and noise generated are often bothersome.

If the video servers, corporate servers, database servers, animation servers, rendering servers, and playback servers become unavailable, quick troubleshooting and rebooting are essential to restoring operations, ensuring programming, and retaining consumers. Centralizing these assets and equipping the engineering staff with remote management tools can help solve these challenges.

Raritan’s Remote Broadcast Server Management and Control Solution centralizes management and provides out-of-band, remote access of critical IT resources from anywhere. Combined with tight security, power, and environmental control, the Solution provides IT and engineering with the tools necessary to troubleshoot issues, restore operations and ensure broadcast availability …anytime and anywhere.

For more information on how Remote Broadcast Server Management and Control Solution can help your business, contact your authorized Raritan representative or see our website at: https://www.raritan.com/resources/application-briefs/application-brief-broadcast-server-management.pdf.

For more information visit our Broadcast Solutions page here.

To DCIM or not to DCIM - That is the question

March 12, 2012

You may be wondering if a DCIM solution is right for you. According to Analyst, Rakesh Kumar at Gartner, there are six events that should trigger your decision to invest in a DCIM solution. The six are:

1. Specific power, cooling and floor space capacity issues

2. Data center consolidation projects

3. Building new data centers

4. Data center financial and cost reviews

5. Technical and architectural changes

6. Environment and sustainability focus

So the answer to the question, “To DCIM or not to DCIM” should definitely be: Yes, DCIM!

Raritan offers a comprehensive, yet easy to implement, cost effective DCIM solution designed to help you effectively manage the space, power and cooling within your datacenter.

Check us out at: https://www.raritan.com/products/data-center-infrastructure-management/

We will be at DatacenterDynamics New York on March 15th.

Dorothy Ochs
March 9, 2012

Join us for the JR Simplot Case Study Presentation at 3:10 pm in Hall 2. JR Simplot’s Data Center was maxed out of power with no procedures for cabling and equipment installs - it was every man for himself. Their goal was to be more efficient with power and to increase IT equipment rack density. They selected Raritan’s solution of intelligent PDUs, environmental sensors, and DCIM software. Learn how they achieved these goals.

For a complimentary pass, please contact marketing@raritan.com. We will also be raffling an iPad at our booth. Stop by!