Thank you very much for all of this info - it is very helpful!
Tammy :-)
"Leythos" wrote:
[Quoted Text] > In article <651B8BF2-CEC1-4755-9A44-6420E57C2EFC[ at ]microsoft.com>,
> Tammy[ at ]discussions.microsoft.com says...
> >
> > We are running Small Business Server 2003 Premium and we also have a
> > Terminal Server (Windows Server 2003) on our LAN for 5 remote users to run an
> > Accounting application on it. I was asked these questions by a user and
> > quite frankly I am not sure what the answer is.
> >
> > 1) is it faster for a user to connect to the network using the VPN client
> > software and then doing RDP to their desktop - as opposed to connecting to
> > their desktop via RWW?
>
> Misleading question - partly:
>
> 1) Connecting is the same, performance is very different.
>
> 2) Performance of a user running RD into a Terminal Server is always
> going to be faster than a user running application across a VPN from
> their local computer. The application on the local computer must
> pull/push all data through the VPN, typically slower than a 100MBPS lan
> connection, so, at best, if you had a T1 all to your self, you could
> push about 1mbps in/out of your remote location (includes overhead for
> VPN). A Terminal server is local to the company LAN and SBS box, it runs
> at 1GBPS in most cases... You do the math.
>
>
> > **I am thinking that it does not really make a difference in performance??
>
> You would be very wrong - all data moves locally in a T/S connection,
> nothing has to come to your remote computer except images and key/mouse
> movement (about 30kbps needed, even less than a modem can handle).
>
> In a VPN, were you run the app on your remote machine with the files and
> data in the local office, you are limited to about 1mbps and if the
> connection fails you are left with corrupt files.
>
> > 2) is it faster for a remote Terminal Server user to VPN to the network and
> > then RDP to the Terminal Server?
>
> We never expose RD to the public, we always set Hardware VPN's between
> offices and user VPN's to the firewall for remote users. We restrict the
> VPN sessions to TCP Port 3389 for the remote users.
>
> > **I don't think it will be necessarily faster and actually just adds another
> > step for those remote users - right now they have an RDP shortcut on their
> > desktop to connect directly to the Terminal Server in our office - ISA
> > configured to allow this for their IP address
>
> I don't trust users or their password creation - we setup users and
> passwords that don't match their SBS user passwords, two layers of
> security.
>
>
>
> --
>
> Leythos
> - Igitur qui desiderat pacem, praeparet bellum.
> - Calling an illegal alien an "undocumented worker" is like calling a
> drug dealer an "unlicensed pharmacist"
> spam999free[ at ]rrohio.com (remove 999 for proper email address)
>
|