Tripp Lite B0930082E4UM Owners Manual for B093- B097- and B098-Series Console - Page 128

6. SSH Tunnels and SDT Connector 6.12 VNC Security VNC access generally allows access to your whole computer, so maintaining strong security is important. VNC uses a random challenge-response system to provide the basic authentication that allows you to connect to a VNC server. This is reasonably secure and the password is not sent over the network. Once connected, all subsequent VNC traffic is unencrypted and a malicious user could snoop your VNC session. VNC scanning programs are also available, which scan a subnet that searches for PCs listening on VNC ports. Tunneling VNC over a SSH connection ensures all traffic is strongly encrypted. When using this method, no VNC port is ever open to the internet, so no one scanning for open VNC ports will be able to find your computers. When tunneling VNC over a SSH connection, the only port which you are opening on your console server is SDT port 22. Sometimes it may be prudent to tunnel VNC through SSH, even when the viewer PC and the console server are both on the same local network. 128