How can I link to a BOOK that I was given to me at the training courses?
How can we understand the context if you quote one sentence from a BOOK that we cannot see?
But, if I Yahoo! for "best practices server internet management" I see this white paper from Cisco
Cisco SAFE Reference Guide which discusses in-band and out-of-band network security issues, and how to protect servers from attacks.
And the Cisco white paper pretty clearly says that in-band management is to be avoided whenever possible - whatever the operating system (even for IOS).
Therefore, I cannot accept your statement that "Microsoft and RedHat say not to use terminal services" without understanding the wider context of the quotes from Microsoft and RedHat. They may merely be reflections of industry-wide best practices, not damning the terminal services protocol as you seem to imply. ("Best practices" also damn SSH, IPSEC and any other protocol.)
By the way, where I work the IT policy is to require an
air gap between any in-band network and any out-of-band network. I need to have an extra PC in my office connected to a separate physical network switch ("air gap") to connect to out-of-band management services. VPN is not allowed, nor dual-homing - it must be an air gap.
Disclaimer: IT policy considers a VLAN on an IT-managed switch to be "air-gapped" from other VLANs. It means I still need a separate PC and separate network connection in my office - even though both network connections go to the same VLAN-capable network switch. Packets on one RJ45 copper connection cannot get to the network on the other RJ45 copper connection. If you're familiar with IOS this will seem reasonable.
And again, most Windows users are using Terminal Services, and the sky hasn't fallen....
