Symantec PCANYWHERE - V12.5, User Manual

Page: 223 / 329

To deny connections from remote computers that use lower encryption
1 In the Symantec pcAnywhere window, in Advanced View, on the left
navigation bar, click Hosts.
2
In the right pane, under Hosts, right-click the connection item that you want
to configure, and then click Properties.
3 In the properties window, on the Encryption tab, under Settings, in the Level
list, select the type of encryption that you want to use.
4 If applicable, select the algorithm and key strength that you want to use.
5 Under Restrictions, do any of the following:
■
Check Prevent connections from remotes set at a lower encryption level
to restrict connections based on the encryption type.
This option is not applicable for public-key encryption.
■
Check Deny connections from remotes requesting a different algorithm
to restrict connections based on the algorithm and key length.
This option is not applicable for pcAnywhere encoding.
6 Click OK.
Configuring pcAnywhere to use public-key encryption
In public-key encryption, pcAnywhere uses a digital certificate to verify the identity
of the person who is attempting to connect and send data. It then uses symmetric
encryption algorithms to secure the session.
Some configuration is required to ensure that both the host and remote users
have access to the appropriate key pairs. To use public-key encryption in
pcAnywhere, the host and remote users must do the following:
■
Provide each other with copies of their digital certificates.
■
Set up a certificate store that contains the certificates of those users who will
connect to their computers.
■
Locate certificates and private keys when the host computer is running as a
service.
■
Configure a connection item to use public-key encryption.
When you select public-key encryption, pcAnywhere only allows connections with
computers that are also using public-key encryption. Connections with computers
that are set to any other encryption level are denied.
223 Securing your computer and sessions
Using encryption to protect data