...
| Service type | Operating Systems | 2FA option(s) | Notes |
|---|---|---|---|
| Secure Shell | Linux, Unix, Windows, OS X | Password protected public key, or Toopher (via PAM), or PAM OATH, or VPN group with IPTables firewall rules/router ACLs |
|
| Remote Desktop | Windows | Certificate-based auth, or Toopher, or VPN group with firewall rules/router ACLs | |
| VNC | Linux, Unix | SSH tunnel with password-protected public key, or VPN group with firewall rules/router ACLs | |
| Absolute Manage Server | OS X, Windows | VPN group with firewall rules/router ACLs | Network configuration information can be found on ITS' Absolute Manage wiki pages: Ports used by Absolute Manage |
| Apple Remote Desktop | OS X | SSH tunnel with password-protected public key, or VPN group with firewall rules /router ACLs | Apple Remote Desktop is acceptable without the listed 2FA only if it is configured with the observation and control options disabled, and the “request permission to control screen” option enabled. This is a technical limitation inherent in the OS X environment and ISO's position is subject to change pending improvements in this area. |
| TeamViewer | * | VPN group with firewall rules/router ACLs, or OATH compliant app (e.g., Google Authenticator, Toopher, Duo Security) |