IT Baseline Protection Manual - The Information Warfare Site

Data Transmission Systems Remote Access
_________________________________________________________________________________________
3.1 definition of security guidelines for use of RAS (see S 2.187 Definition of a set of RAS
security guidelines),
3.2 installation and initial configuration (see S 4.110 Secure installation of the RAS system and
S 4.111 Secure configuration of the RAS system), and
3.3 the ongoing operation of the RAS system (see S 4.112 Secure operation of the RAS system).
Typically, RAS servers and RAS clients must always be considered with RAS systems. As
the users of a RAS system essentially contribute to its secure operation, they must be
prepared for the use of RAS access and be instructed in the use of the RAS software. Here in
particular their attention must be drawn to the dangers which exist when RAS access is used
from home or on the road (see S 3.4 Training before actual use of a program and S 3.5
Education on IT security measures).
Tunnel protocols are often used as a means of protecting RAS connections. These allow the
establishment, building on an existing connection, of a communication channel between IT
systems or networks which is sealed off through access control and encryption. Because this
channel is sealed off from the outside world the term Virtual Private Network (VPN) is
frequently employed (see S 5.76 Use of suitable tunnel protocols for RAS communication).
The safeguards package for the "Remote Access" module is presented below.
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000