Penetration Testing: [PEN-TEST] RAS PT

["Batten, Gerald" <GBatten () EXOCOM COM>]

I unfortunately have very little experience in doing any sort of PT on a RAS
box... let's assume it's an NT box.  Other than enforcing strong passwords
or maybe strong authentication via certificates or SecurID-type cards, what
else can I do to A) protect it, and B) run some sort of PT against it?

Gerald.

*Note: Views expressed in this e-mail are not necessarily those of my
employer.
**Note:  Views expressed in this e-mail are not necessarily mine either.