Understanding the security features and services built into VNC Connect remote access software
In this video, we’re going to explain how all the security features and services we’ve built in to our VNC Connect screen sharing software combine to make sure you – and all the people in your team – can use remote access and support one another in complete confidence.
Independent authentication systems
Every computer that is part of your team, and that you connect to via our cloud service, is protected by not one but two completely separate authentication systems, so no one password controls remote access. First, in order to discover computers that are available for you to connect to, you must sign in to our VNC Viewer app using your own unique RealVNC account credentials (email address and password). We recommend turning on 2-factor authentication in the online portal to completely secure your RealVNC account, in which case a 6 digit code is sent to your mobile device every time you sign in. Second, you must authenticate to our VNC Server app running on the remote computer (by default, Active Directory or system username and password). You can specify multi-factor authentication for VNC Server, using any combination of digital certificates, smartcards, single-sign on, the RADIUS protocol and more.
Granular access control and rich session permissions
You don’t have to give everyone in your team the same level of remote access. You can restrict the discovery of remote computers in the online portal using groups, so only particular people can discover certain computers. If a person cannot discover a computer using VNC Viewer, they cannot possibly connect to it. Meanwhile, you can integrate VNC Server with Active Directory user groups in order to fine-tune session permissions, and regulate the use of the keyboard, mouse, file transfer, copy and paste, remote printing and text chat.
End-to-end session encryption
Every remote access session is encrypted end-to-end using 128-bit AES encryption and perfect forward secrecy. This means that files, screen data and keystrokes transmitted between two devices during a remote access session remain completely private to you, now and in the future. Neither RealVNC, not any third party, can decrypt session communications. If you have an Enterprise subscription, you can upgrade encryption to 256-bit AES.
Audit logging
Every session is logged, so you can see a complete history of who connected, when, for how long, and what session permissions were granted. You can dial up the log level and specify alternate log destinations to configure your audit trail exactly how you need it.
For more information, please visit:
VNC Connect security center: https://www.realvnc.com/connect/security
VNC Connect trial: https://www.realvnc.com/trial
VNC Connect home page: https://www.realvnc.com/connect
RealVNC help center: https://help.realvnc.com