01-29-2008 03:01 AM - edited 01-29-2008 03:10 AM
Message Edited by muttbarker on 01-29-2008 03:10 AM
JNCIS-ENT, FWV, SSL, WLAN
JNCIA-ER, EX, IDP, UAC, WX
Juniper Networks Certified Instructor
Juniper Networks Ambassador
Juniper Elite Reseller
J-Partner Service Specialist - Implementation
If this worked for you please flag my post as an "Accepted Solution" so others can benefit. A kudo would be cool if you think I earned it.
02-01-2008 09:05 AM
Technical Marketing Manager - Access and Acceleration Business Unit
02-01-2008 10:27 AM
To change the encryption level, you must be an administrator. In Programs | Administrative Tools, select Terminal Services Configuration and perform these steps:
1. In the left console pane, select Connections.
2. In the right details pane, right click RDP-TCP and select Properties.
3. Click the General tab.
4. Under Encryption level, select the desired level in the drop down box and click OK.
• High: encrypts both the data sent from client to server and the data sent from server to client using a 128 bit key.
• Medium: encrypts both the data sent from client to server and the data sent from server to client using a 56 bit key if the client is a Windows 2000 or above client, or a 40 bit key if the client is an earlier version.
• Low: encrypts only the data sent from client to server, using either a 56 or 40 bit key, depending on the client version. Useful to protect usernames and passwords sent from client to server.
And, as Danny said if the PC-Clients are using RDP 5.2/6.0, you can configure the Windows 2003/2008 servers "Security Layer" (in the same General tab as "Encryption Level") to use SSL encryption ("Negotiate" option). With our SSL acceleration (in 5.5 release) the WX will be able to accelerate that traffic even with encryption is at High level.