Is there a secure alternative to VNC that we can use to view/manage e2e probe scripts?

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

We have a lot of e2e scripts that we use and when watching them on the virtual desktops the only way to connect and watch is over VNC

VNC carries a security risk, so our security team has asked that we try to see if there is an alternative way this can be done.

Environment

• e2e_appmon

Resolution

A customer's security team would know best and it has to be their decision on which product is ok to use for remote viewing purposes.

These are the remote VNC products available today. There may be other VNC products that have tighter security.

Maybe UltraVNC has the tightest security but security teams/consultants/experts would know best.

• TightVNC
• UltraVNC
• TigerVNC
• VNCConnect
• TeamViewer
• Remmina
• JollysFastVNC

UltraVNC supports the use of an open-source encryption plugin which encrypts the entire VNC session including password authentication and data transfer. It also allows authentication to be performed based on NTLM and Active Directory user accounts. However, use of such encryption plugins makes it incompatible with other VNC programs. RealVNC offers high-strength AES encryption as part of its commercial package, along with integration with Active Directory. Workspot released AES encryption patches for VNC. According to TightVNC, TightVNC is not secure as picture data is transmitted without encryption. To circumvent this, it should be tunneled through an SSH connection.