car logo  
Metropolitan Transportation Commision - Pavement Management Program

StreetSaver® v.8 Online - How Safe is it?

StreetSaver® Online Security and Connection Briefing

Security

StreetSaver® Online utilizes Microsoft Remote Desktop technology to access the StreetSaver® software in a hosted environment.

The StreetSaver® Online Terminal Servers utilize Full Security Mode to take advantage of the new security features in Windows Server 2003 family operating systems and provide a secure environment for MTC customers.

All Terminal Services connections between the StreetSaver® Online Terminal Servers and client computers running the Remote Desktop Connection client are encrypted with High (128-bit) encryption. The logon process is also encrypted, ensuring secure transfer of user name and password, and preventing the transmission of passwords in “clear text” over the Internet.

All logon attempts, regardless of success or failure, are logged by the system, and all available information, such as IP address, username and password are stored for auditing purposes.

The number of user logon attempts is also limited to prevent unauthorized access to a server. Additionally, the connection time of an individual user is restricted to 5 minutes for periods of inactivity, ensuring that client machines left unattended are logged off of the system in a timely fashion.

StreetSaver® client databases can be downloaded from a user account page on streetsaveronline.com, over Secure Sockets Layer.

It is important for Network Administrators to distinguish between the Remote Desktop Service and the Remote Desktop Connection client software. The latter is included on Windows XP and Windows 2000 Pro and can be installed on Windows 9x and NT computers and also some third party operating systems. The client software does not pose a security risk.

StreetSaver® Online Terminal Servers are dedicated to MTC customers. Only the software required for the operation of the StreetSaver® system is allowed, so that performance and security can be optimized.

MTC Administrators may interact with an individual user session through the “Remote Control” feature. Each user must first grant permission to the Administrator to allow interaction. StreetSaver® Terminal Servers are configured to only allow “Remote Control” with the permission of the customer. It is the policy of MTC to never “eavesdrop” or “snoop” on a user’s session while online.

Connections

Connecting to StreetSaver® Online through Web Browser
http://www.streetsaveronline.com

The StreetSaver® Online website utilizes the Terminal Services Web Client to provide a Remote Desktop Web Connection.

Remote Desktop Web Connection is an ActiveX control that provides virtually the same functionality as the full Remote Desktop Connection client, but is designed to deliver this functionality over the Web. The Remote Desktop Web Connection hosts the StreetSaver® Online Terminal Services client session even if the full Remote Desktop client is not installed on the user's computer.

For detailed information on getting set up for access to StreetSaver® Online, visit the Setup Guide at http://www.streetsaveronline.com/setupguide.htm.

An alternative method of access, detailed below, is available for users that are unable to access StreetSaver® Online through the website, which may occur for a variety of reasons, including mandate of a local IT department or configuration of the user’s web browser.

Connecting directly to StreetSaver® Online through Remote Desktop

· To open Remote Desktop Connection, click Start, point to programs or All programs, point to Accessories, point to Communications, and then click Remote Desktop Connection.

· To change your connection settings, (such as screen size, automatic logon information, and performance options), click Options before you connect

· Open Remote Desktop Connection.

· To connect to the StreetSaver® Online servers, type in the IP address provided by MTC.

· Click Connect.

· The Log On to Windows dialog box appears.

· In the Log On to Windows dialog box, type in the user name and password provided by MTC, and then click OK.

Back to Offer >>

MTC Go To the MTC Site